# --- namespace: models-as-a-service ---
apiVersion: v1
items:
- apiVersion: maas.opendatahub.io/v1alpha1
  kind: MaaSAuthPolicy
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"maas.opendatahub.io/v1alpha1","kind":"MaaSAuthPolicy","metadata":{"annotations":{"openshift.io/description":"Grants premium-user group access to the premium simulator model","openshift.io/display-name":"Premium Simulator Access"},"name":"premium-simulator-access","namespace":"models-as-a-service"},"spec":{"modelRefs":[{"name":"premium-simulated-simulated-premium","namespace":"llm"}],"subjects":{"groups":[{"name":"premium-user"}],"users":[]}}}
      openshift.io/description: Grants premium-user group access to the premium simulator
        model
      openshift.io/display-name: Premium Simulator Access
    creationTimestamp: "2026-06-08T16:49:30Z"
    finalizers:
    - maas.opendatahub.io/authpolicy-cleanup
    generation: 3
    name: premium-simulator-access
    namespace: models-as-a-service
    resourceVersion: "44693"
    uid: 1b9b9dc2-8f9b-4ec2-9959-445764fd3a04
  spec:
    modelRefs:
    - name: premium-simulated-simulated-premium
      namespace: llm
    subjects:
      groups:
      - name: premium-user
      users:
      - system:serviceaccount:premium-users-namespace:premium-service-account
  status:
    authPolicies:
    - model: premium-simulated-simulated-premium
      modelNamespace: llm
      name: maas-auth-premium-simulated-simulated-premium
      namespace: llm
      ready: true
      reason: AcceptedEnforced
    conditions:
    - lastTransitionTime: "2026-06-08T16:49:30Z"
      message: No conflicting AuthPolicies detected on MaaS-managed HTTPRoutes
      observedGeneration: 3
      reason: NoConflict
      status: "False"
      type: ConflictingAuthPolicy
    - lastTransitionTime: "2026-06-08T17:09:11Z"
      message: successfully reconciled
      observedGeneration: 3
      reason: Reconciled
      status: "True"
      type: Ready
    phase: Active
- apiVersion: maas.opendatahub.io/v1alpha1
  kind: MaaSAuthPolicy
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"maas.opendatahub.io/v1alpha1","kind":"MaaSAuthPolicy","metadata":{"annotations":{"openshift.io/description":"Grants all authenticated users access to the free-tier simulator model","openshift.io/display-name":"Simulator Access (Free)"},"finalizers":["maas.opendatahub.io/authpolicy-cleanup"],"name":"simulator-access","namespace":"models-as-a-service"},"spec":{"modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm"}],"subjects":{"groups":[{"name":"system:authenticated"}]}}}
      openshift.io/description: Grants all authenticated users access to the free-tier
        simulator model
      openshift.io/display-name: Simulator Access (Free)
    creationTimestamp: "2026-06-08T17:03:05Z"
    finalizers:
    - maas.opendatahub.io/authpolicy-cleanup
    generation: 1
    name: simulator-access
    namespace: models-as-a-service
    resourceVersion: "47763"
    uid: a2367b2e-b0c6-44bd-8915-b4b29449a7d3
  spec:
    modelRefs:
    - name: facebook-opt-125m-simulated
      namespace: llm
    subjects:
      groups:
      - name: system:authenticated
  status:
    authPolicies:
    - model: facebook-opt-125m-simulated
      modelNamespace: llm
      name: maas-auth-facebook-opt-125m-simulated
      namespace: llm
      ready: true
      reason: AcceptedEnforced
    conditions:
    - lastTransitionTime: "2026-06-08T17:03:05Z"
      message: No conflicting AuthPolicies detected on MaaS-managed HTTPRoutes
      observedGeneration: 1
      reason: NoConflict
      status: "False"
      type: ConflictingAuthPolicy
    - lastTransitionTime: "2026-06-08T17:12:06Z"
      message: successfully reconciled
      observedGeneration: 1
      reason: Reconciled
      status: "True"
      type: Ready
    phase: Active
kind: List
metadata:
  resourceVersion: ""