/workspace/source/test/e2e/tests/test_subscription.py:1040: gateway-only mode: per-model AuthPolicy is not createdself = <test_models_endpoint.TestModelsEndpoint object at 0x7f8daac85d30> def test_api_key_ignores_subscription_header(self): """ Test: API key ignores x-maas-subscription header and uses bound subscription. Creates an API key bound to one subscription, then sends request with header pointing to a different subscription. The API key should ignore the header and return models from its bound subscription. Expected: HTTP 200 with models from the key's bound subscription (header ignored). """ sa_name = "e2e-api-key-ignores-header-sa" sa_ns = "default" maas_ns = _ns() sub1_name = "e2e-ignore-header-sub1" sub2_name = "e2e-ignore-header-sub2" auth1_name = "e2e-ignore-header-auth1" auth2_name = "e2e-ignore-header-auth2" api_key = None try: # Create SA sa_token = _create_sa_token(sa_name, namespace=sa_ns) sa_user = _sa_to_user(sa_name, namespace=sa_ns) # Create two subscriptions with different models log.info(f"Creating subscription 1 with {DISTINCT_MODEL_REF}") _create_test_auth_policy(auth1_name, DISTINCT_MODEL_REF, users=[sa_user]) _create_test_subscription(sub1_name, DISTINCT_MODEL_REF, users=[sa_user], priority=10) log.info(f"Creating subscription 2 with {DISTINCT_MODEL_2_REF}") _create_test_auth_policy(auth2_name, DISTINCT_MODEL_2_REF, users=[sa_user]) _create_test_subscription(sub2_name, DISTINCT_MODEL_2_REF, users=[sa_user], priority=5) # Wait for both subscriptions to reconcile before creating API key _wait_for_maas_subscription_phase(sub1_name, namespace=maas_ns) _wait_for_maas_subscription_phase(sub2_name, namespace=maas_ns) # Create API key - will be bound to highest priority subscription (sub1) log.info(f"Creating API key (will bind to {sub1_name} - highest priority)") api_key = _create_api_key(sa_token, name=f"{sa_name}-key") _wait_reconcile() # Test: Send request with header pointing to sub2, but key is bound to sub1 log.info(f"Querying /v1/models with API key bound to {sub1_name} but header={sub2_name}") r = requests.get( f"{_maas_api_url()}/v1/models", headers={ "Authorization": f"Bearer {api_key}", "x-maas-subscription": sub2_name, # Try to override with header }, timeout=TIMEOUT, verify=TLS_VERIFY, ) > assert r.status_code == 200, f"Expected 200, got {r.status_code}: {r.text}" E AssertionError: Expected 200, got 500: {"error":"Exception thrown while generating token","exceptionCode":"AUTH_FAILURE","refId":"001"} E assert 500 == 200 E + where 500 = <Response [500]>.status_code test/e2e/tests/test_models_endpoint.py:1798: AssertionError/workspace/source/test/e2e/tests/test_external_models.py:209: External endpoint httpbin.org is not reachable (disconnected environment?)/workspace/source/test/e2e/tests/test_external_models.py:214: External endpoint httpbin.org is not reachable (disconnected environment?)/workspace/source/test/e2e/tests/test_external_models.py:219: External endpoint httpbin.org is not reachable (disconnected environment?)/workspace/source/test/e2e/tests/test_external_models.py:230: External endpoint httpbin.org is not reachable (disconnected environment?)/workspace/source/test/e2e/tests/test_external_models.py:243: External endpoint httpbin.org is not reachable (disconnected environment?)/workspace/source/test/e2e/tests/test_external_models.py:259: External endpoint httpbin.org is not reachable (disconnected environment?)/workspace/source/test/e2e/tests/test_external_models.py:288: External endpoint httpbin.org is not reachable (disconnected environment?)/workspace/source/test/e2e/tests/test_tenant.py:127: Tenant not Active (e.g. Degraded); payload-processing not asserted/workspace/source/test/e2e/tests/test_external_oidc.py:426: OIDC_USERNAME_NO_ACCESS and OIDC_PASSWORD_NO_ACCESS not configured