--- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: controller-gen.kubebuilder.io/version: v0.19.0 kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"apiextensions.k8s.io/v1","kind":"CustomResourceDefinition","metadata":{"annotations":{"controller-gen.kubebuilder.io/version":"v0.19.0"},"labels":{"app.kubernetes.io/component":"models-as-a-service","app.kubernetes.io/name":"maas-controller","app.kubernetes.io/part-of":"models-as-a-service"},"name":"externalmodels.inference.opendatahub.io"},"spec":{"group":"inference.opendatahub.io","names":{"kind":"ExternalModel","listKind":"ExternalModelList","plural":"externalmodels","singular":"externalmodel"},"scope":"Namespaced","versions":[{"additionalPrinterColumns":[{"jsonPath":".status.phase","name":"Phase","type":"string"},{"jsonPath":".metadata.creationTimestamp","name":"Age","type":"date"}],"name":"v1alpha1","schema":{"openAPIV3Schema":{"description":"ExternalModel defines a client-facing model that maps to one or more\nexternal providers. The model name clients use in requests is determined\nby spec.modelName (if set) or metadata.name (default).","properties":{"apiVersion":{"description":"APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources","type":"string"},"kind":{"description":"Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds","type":"string"},"metadata":{"type":"object"},"spec":{"description":"ExternalModelSpec defines the desired state of ExternalModel.","properties":{"externalProviderRefs":{"description":"ExternalProviderRefs maps this model to one or more external providers.\nEach entry specifies the provider specific details.","items":{"description":"ExternalProviderRef binds this model to a specific provider with translation config.","properties":{"apiFormat":{"description":"APIFormat determines how requests/responses are translated for this provider.\nSupported values:\n - \"openai-chat\": OpenAI Chat Completions API (/v1/chat/completions)\n - \"messages\": Anthropic Messages API (/v1/messages)","maxLength":63,"minLength":1,"type":"string"},"auth":{"description":"Auth overrides the ExternalProvider authentication for this model-provider binding.\nIts Secret is in the ExternalModel namespace. If not set, the\nExternalProvider auth and its provider-local Secret are used.","properties":{"secretRef":{"description":"SecretRef references a Kubernetes Secret containing the provider API key.\nProvider-level auth uses the ExternalProvider namespace. A per-model\noverride uses the ExternalModel namespace, even for a provider in another\nnamespace. The Secret must contain a data key \"api-key\" with the credential value.","properties":{"name":{"maxLength":253,"minLength":1,"pattern":"^[a-z0-9]([a-z0-9.\\-]*[a-z0-9])?$","type":"string"}},"required":["name"],"type":"object"},"type":{"description":"Type identifies the auth type for this provider.\ne.g. \"apikey\" (header based), \"sigv4\", etc.\n\"simple\" is retained for installed-schema compatibility and is served as \"apikey\".","enum":["apikey","simple","sigv4","oauth2"],"type":"string"}},"required":["secretRef","type"],"type":"object"},"config":{"additionalProperties":{"type":"string"},"description":"Config holds model-specific configuration as key-value pairs.\nOverrides the ExternalProvider config for this model-provider binding.","type":"object"},"path":{"description":"Path sets the outgoing request `:path` pseudo-header for this model-provider binding.\nMust be a valid absolute path (e.g. \"/v1/chat/completions\" or\n\"/maas-default-gateway/v1/chat/completions\").\nSupports {key} placeholders resolved from the merged Config map.","maxLength":512,"minLength":1,"pattern":"^/.*","type":"string"},"ref":{"description":"Ref identifies the ExternalProvider CR. An omitted namespace means the\nExternalModel namespace.","properties":{"name":{"maxLength":253,"minLength":1,"pattern":"^[a-z0-9]([a-z0-9.\\-]*[a-z0-9])?$","type":"string"},"namespace":{"description":"Namespace is the ExternalProvider namespace. Cross-namespace references\nrequire authorization in the provider namespace before serving.","maxLength":63,"minLength":1,"pattern":"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$","type":"string"}},"required":["name"],"type":"object"},"targetModel":{"description":"TargetModel is the provider-specific model identifier.\ne.g. \"gpt-4o\", \"anthropic.claude-3-opus\", \"claude-sonnet-4-5-20241022\".","maxLength":253,"minLength":1,"type":"string"},"weight":{"default":1,"description":"Weight determines the relative traffic proportion for this provider binding.\nHigher weight means more traffic. Used for weighted random selection across\nmultiple provider refs. A weight of 0 disables the ref (no traffic routed\nto it). Defaults to 1 if not set.","maximum":100,"minimum":0,"type":"integer"}},"required":["apiFormat","path","ref","targetModel"],"type":"object"},"maxItems":64,"minItems":1,"type":"array"},"gatewayRefs":{"description":"GatewayRefs explicitly selects the Praxis gateways that serve this model.\nWhen omitted, the tenant whose MaasTenantConfig is in the model namespace\nserves the model; in a namespace of no tenant, the default tenant's Gateway does.\nNames are distinct across namespaces. An explicit empty list is invalid.","items":{"description":"NamespacedObjectReference identifies a Gateway or HTTPRoute by its full identity.","properties":{"name":{"description":"Name is the resource name, a Kubernetes DNS subdomain.","maxLength":253,"minLength":1,"pattern":"^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$","type":"string"},"namespace":{"description":"Namespace is the resource namespace, a Kubernetes DNS label.","maxLength":63,"minLength":1,"pattern":"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$","type":"string"}},"required":["name","namespace"],"type":"object"},"maxItems":16,"minItems":1,"type":"array","x-kubernetes-list-map-keys":["namespace","name"],"x-kubernetes-list-type":"map"},"modelName":{"description":"ModelName is the client-facing model name used in inference request bodies.\nClients send this value in the \"model\" field of chat completion requests.\nDefaults to metadata.name if not set. Use this field when the desired\nmodel name contains characters not allowed in Kubernetes resource names\n(dots, colons, slashes, uppercase).","maxLength":253,"type":"string"}},"required":["externalProviderRefs"],"type":"object"},"status":{"description":"ExternalModelStatus defines the observed state of ExternalModel.","properties":{"conditions":{"description":"Conditions represent the latest available observations of the model's state.","items":{"description":"Condition contains details for one aspect of the current state of this API Resource.","properties":{"lastTransitionTime":{"description":"lastTransitionTime is the last time the condition transitioned from one status to another.\nThis should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.","format":"date-time","type":"string"},"message":{"description":"message is a human readable message indicating details about the transition.\nThis may be an empty string.","maxLength":32768,"type":"string"},"observedGeneration":{"description":"observedGeneration represents the .metadata.generation that the condition was set based upon.\nFor instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date\nwith respect to the current state of the instance.","format":"int64","minimum":0,"type":"integer"},"reason":{"description":"reason contains a programmatic identifier indicating the reason for the condition's last transition.\nProducers of specific condition types may define expected values and meanings for this field,\nand whether the values are considered a guaranteed API.\nThe value should be a CamelCase string.\nThis field may not be empty.","maxLength":1024,"minLength":1,"pattern":"^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$","type":"string"},"status":{"description":"status of the condition, one of True, False, Unknown.","enum":["True","False","Unknown"],"type":"string"},"type":{"description":"type of condition in CamelCase or in foo.example.com/CamelCase.","maxLength":316,"pattern":"^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$","type":"string"}},"required":["lastTransitionTime","message","reason","status","type"],"type":"object"},"type":"array"},"gateways":{"description":"Gateways reports reconciliation and distribution readiness per gateway.\nAggregate Ready requires all requested attachments; an independently ready\nattachment remains usable during partial failure. Readiness does not attest\nto successful inference requests.","items":{"description":"ExternalModelGatewayStatus is the result for one gateway attachment.","properties":{"conditions":{"description":"Conditions describe this attachment. Each condition's observedGeneration\nidentifies the ExternalModel generation it reflects. Missing, stale or\nfailed status must not fall back to another gateway's result.","items":{"description":"Condition contains details for one aspect of the current state of this API Resource.","properties":{"lastTransitionTime":{"description":"lastTransitionTime is the last time the condition transitioned from one status to another.\nThis should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.","format":"date-time","type":"string"},"message":{"description":"message is a human readable message indicating details about the transition.\nThis may be an empty string.","maxLength":32768,"type":"string"},"observedGeneration":{"description":"observedGeneration represents the .metadata.generation that the condition was set based upon.\nFor instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date\nwith respect to the current state of the instance.","format":"int64","minimum":0,"type":"integer"},"reason":{"description":"reason contains a programmatic identifier indicating the reason for the condition's last transition.\nProducers of specific condition types may define expected values and meanings for this field,\nand whether the values are considered a guaranteed API.\nThe value should be a CamelCase string.\nThis field may not be empty.","maxLength":1024,"minLength":1,"pattern":"^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$","type":"string"},"status":{"description":"status of the condition, one of True, False, Unknown.","enum":["True","False","Unknown"],"type":"string"},"type":{"description":"type of condition in CamelCase or in foo.example.com/CamelCase.","maxLength":316,"pattern":"^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$","type":"string"}},"required":["lastTransitionTime","message","reason","status","type"],"type":"object"},"type":"array","x-kubernetes-list-map-keys":["type"],"x-kubernetes-list-type":"map"},"httpRouteRef":{"description":"HTTPRouteRef identifies the HTTPRoute for this attachment, when available.","properties":{"name":{"description":"Name is the resource name, a Kubernetes DNS subdomain.","maxLength":253,"minLength":1,"pattern":"^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$","type":"string"},"namespace":{"description":"Namespace is the resource namespace, a Kubernetes DNS label.","maxLength":63,"minLength":1,"pattern":"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$","type":"string"}},"required":["name","namespace"],"type":"object"},"name":{"description":"Name is the resource name, a Kubernetes DNS subdomain.","maxLength":253,"minLength":1,"pattern":"^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$","type":"string"},"namespace":{"description":"Namespace is the resource namespace, a Kubernetes DNS label.","maxLength":63,"minLength":1,"pattern":"^[a-z0-9]([-a-z0-9]*[a-z0-9])?$","type":"string"}},"required":["name","namespace"],"type":"object"},"type":"array","x-kubernetes-list-map-keys":["namespace","name"],"x-kubernetes-list-type":"map"},"httpRouteName":{"description":"HTTPRouteName is the name of the HTTPRoute created by the controller\nfor this ExternalModel. Consumers (e.g., maas-controller) can read this\nto attach policies without assuming naming conventions.\nRetained for legacy models and a single gateway attachment whose route is\nin the model namespace. Empty for multiple attachments or another route namespace.","type":"string"},"observedGeneration":{"description":"ObservedGeneration is the latest spec generation processed by the controller.","format":"int64","type":"integer"},"overlayDigest":{"description":"OverlayDigest is the content digest distributed to Praxis. It attests to\ndistribution, not to request-time serving.","type":"string"},"overlayGeneration":{"description":"OverlayGeneration is the monotonic source generation distributed to Praxis.","format":"int64","type":"integer"},"phase":{"description":"Phase represents the current reconciliation phase.\nReady: all networking resources created successfully.\nFailed: reconciliation error (e.g., missing ExternalProvider, missing Secret).\nThis reflects controller reconciliation state, not runtime request health.","enum":["Pending","Ready","Failed"],"type":"string"}},"type":"object"}},"type":"object"}},"served":true,"storage":true,"subresources":{"status":{}}}]}} creationTimestamp: "2026-10-30T17:56:55Z" generation: 1 labels: app.kubernetes.io/component: models-as-a-service app.kubernetes.io/name: maas-controller app.kubernetes.io/part-of: models-as-a-service managedFields: - apiVersion: apiextensions.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:acceptedNames: f:kind: {} f:listKind: {} f:plural: {} f:singular: {} f:conditions: k:{"type":"Established"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"NamesAccepted"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: kube-apiserver operation: Update subresource: status time: "2026-10-30T17:56:55Z" - apiVersion: apiextensions.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:controller-gen.kubebuilder.io/version: {} f:kubectl.kubernetes.io/last-applied-configuration: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:spec: f:conversion: .: {} f:strategy: {} f:group: {} f:names: f:kind: {} f:listKind: {} f:plural: {} f:singular: {} f:scope: {} f:versions: {} manager: kubectl-client-side-apply operation: Update time: "2026-10-30T17:57:54Z" name: externalmodels.inference.opendatahub.io resourceVersion: "14282" uid: 895196a5-4870-492b-9f84-5bcd9deadce2 spec: conversion: strategy: None group: inference.opendatahub.io names: kind: ExternalModel listKind: ExternalModelList plural: externalmodels singular: externalmodel scope: Namespaced versions: - additionalPrinterColumns: - jsonPath: .status.phase name: Phase type: string - jsonPath: .metadata.creationTimestamp name: Age type: date name: v1alpha1 schema: openAPIV3Schema: description: |- ExternalModel defines a client-facing model that maps to one or more external providers. The model name clients use in requests is determined by spec.modelName (if set) or metadata.name (default). properties: apiVersion: description: |- APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources type: string kind: description: |- Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds type: string metadata: type: object spec: description: ExternalModelSpec defines the desired state of ExternalModel. properties: externalProviderRefs: description: |- ExternalProviderRefs maps this model to one or more external providers. Each entry specifies the provider specific details. items: description: ExternalProviderRef binds this model to a specific provider with translation config. properties: apiFormat: description: |- APIFormat determines how requests/responses are translated for this provider. Supported values: - "openai-chat": OpenAI Chat Completions API (/v1/chat/completions) - "messages": Anthropic Messages API (/v1/messages) maxLength: 63 minLength: 1 type: string auth: description: |- Auth overrides the ExternalProvider authentication for this model-provider binding. Its Secret is in the ExternalModel namespace. If not set, the ExternalProvider auth and its provider-local Secret are used. properties: secretRef: description: |- SecretRef references a Kubernetes Secret containing the provider API key. Provider-level auth uses the ExternalProvider namespace. A per-model override uses the ExternalModel namespace, even for a provider in another namespace. The Secret must contain a data key "api-key" with the credential value. properties: name: maxLength: 253 minLength: 1 pattern: ^[a-z0-9]([a-z0-9.\-]*[a-z0-9])?$ type: string required: - name type: object type: description: |- Type identifies the auth type for this provider. e.g. "apikey" (header based), "sigv4", etc. "simple" is retained for installed-schema compatibility and is served as "apikey". enum: - apikey - simple - sigv4 - oauth2 type: string required: - secretRef - type type: object config: additionalProperties: type: string description: |- Config holds model-specific configuration as key-value pairs. Overrides the ExternalProvider config for this model-provider binding. type: object path: description: |- Path sets the outgoing request `:path` pseudo-header for this model-provider binding. Must be a valid absolute path (e.g. "/v1/chat/completions" or "/maas-default-gateway/v1/chat/completions"). Supports {key} placeholders resolved from the merged Config map. maxLength: 512 minLength: 1 pattern: ^/.* type: string ref: description: |- Ref identifies the ExternalProvider CR. An omitted namespace means the ExternalModel namespace. properties: name: maxLength: 253 minLength: 1 pattern: ^[a-z0-9]([a-z0-9.\-]*[a-z0-9])?$ type: string namespace: description: |- Namespace is the ExternalProvider namespace. Cross-namespace references require authorization in the provider namespace before serving. maxLength: 63 minLength: 1 pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ type: string required: - name type: object targetModel: description: |- TargetModel is the provider-specific model identifier. e.g. "gpt-4o", "anthropic.claude-3-opus", "claude-sonnet-4-5-20241022". maxLength: 253 minLength: 1 type: string weight: default: 1 description: |- Weight determines the relative traffic proportion for this provider binding. Higher weight means more traffic. Used for weighted random selection across multiple provider refs. A weight of 0 disables the ref (no traffic routed to it). Defaults to 1 if not set. maximum: 100 minimum: 0 type: integer required: - apiFormat - path - ref - targetModel type: object maxItems: 64 minItems: 1 type: array gatewayRefs: description: |- GatewayRefs explicitly selects the Praxis gateways that serve this model. When omitted, the tenant whose MaasTenantConfig is in the model namespace serves the model; in a namespace of no tenant, the default tenant's Gateway does. Names are distinct across namespaces. An explicit empty list is invalid. items: description: NamespacedObjectReference identifies a Gateway or HTTPRoute by its full identity. properties: name: description: Name is the resource name, a Kubernetes DNS subdomain. maxLength: 253 minLength: 1 pattern: ^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$ type: string namespace: description: Namespace is the resource namespace, a Kubernetes DNS label. maxLength: 63 minLength: 1 pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ type: string required: - name - namespace type: object maxItems: 16 minItems: 1 type: array x-kubernetes-list-map-keys: - namespace - name x-kubernetes-list-type: map modelName: description: |- ModelName is the client-facing model name used in inference request bodies. Clients send this value in the "model" field of chat completion requests. Defaults to metadata.name if not set. Use this field when the desired model name contains characters not allowed in Kubernetes resource names (dots, colons, slashes, uppercase). maxLength: 253 type: string required: - externalProviderRefs type: object status: description: ExternalModelStatus defines the observed state of ExternalModel. properties: conditions: description: Conditions represent the latest available observations of the model's state. items: description: Condition contains details for one aspect of the current state of this API Resource. properties: lastTransitionTime: description: |- lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time type: string message: description: |- message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 type: string observedGeneration: description: |- observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 type: integer reason: description: |- reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ type: string status: description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown type: string type: description: type of condition in CamelCase or in foo.example.com/CamelCase. maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ type: string required: - lastTransitionTime - message - reason - status - type type: object type: array gateways: description: |- Gateways reports reconciliation and distribution readiness per gateway. Aggregate Ready requires all requested attachments; an independently ready attachment remains usable during partial failure. Readiness does not attest to successful inference requests. items: description: ExternalModelGatewayStatus is the result for one gateway attachment. properties: conditions: description: |- Conditions describe this attachment. Each condition's observedGeneration identifies the ExternalModel generation it reflects. Missing, stale or failed status must not fall back to another gateway's result. items: description: Condition contains details for one aspect of the current state of this API Resource. properties: lastTransitionTime: description: |- lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time type: string message: description: |- message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 type: string observedGeneration: description: |- observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 type: integer reason: description: |- reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ type: string status: description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown type: string type: description: type of condition in CamelCase or in foo.example.com/CamelCase. maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ type: string required: - lastTransitionTime - message - reason - status - type type: object type: array x-kubernetes-list-map-keys: - type x-kubernetes-list-type: map httpRouteRef: description: HTTPRouteRef identifies the HTTPRoute for this attachment, when available. properties: name: description: Name is the resource name, a Kubernetes DNS subdomain. maxLength: 253 minLength: 1 pattern: ^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$ type: string namespace: description: Namespace is the resource namespace, a Kubernetes DNS label. maxLength: 63 minLength: 1 pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ type: string required: - name - namespace type: object name: description: Name is the resource name, a Kubernetes DNS subdomain. maxLength: 253 minLength: 1 pattern: ^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$ type: string namespace: description: Namespace is the resource namespace, a Kubernetes DNS label. maxLength: 63 minLength: 1 pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ type: string required: - name - namespace type: object type: array x-kubernetes-list-map-keys: - namespace - name x-kubernetes-list-type: map httpRouteName: description: |- HTTPRouteName is the name of the HTTPRoute created by the controller for this ExternalModel. Consumers (e.g., maas-controller) can read this to attach policies without assuming naming conventions. Retained for legacy models and a single gateway attachment whose route is in the model namespace. Empty for multiple attachments or another route namespace. type: string observedGeneration: description: ObservedGeneration is the latest spec generation processed by the controller. format: int64 type: integer overlayDigest: description: |- OverlayDigest is the content digest distributed to Praxis. It attests to distribution, not to request-time serving. type: string overlayGeneration: description: OverlayGeneration is the monotonic source generation distributed to Praxis. format: int64 type: integer phase: description: |- Phase represents the current reconciliation phase. Ready: all networking resources created successfully. Failed: reconciliation error (e.g., missing ExternalProvider, missing Secret). This reflects controller reconciliation state, not runtime request health. enum: - Pending - Ready - Failed type: string type: object type: object served: true storage: true subresources: status: {} status: acceptedNames: kind: ExternalModel listKind: ExternalModelList plural: externalmodels singular: externalmodel conditions: - lastTransitionTime: "2026-10-30T17:56:55Z" message: no conflicts found reason: NoConflicts status: "True" type: NamesAccepted - lastTransitionTime: "2026-10-30T17:56:55Z" message: the initial names have been accepted reason: InitialNamesAccepted status: "True" type: Established storedVersions: - v1alpha1