nerdalert

• Logs from 1 inference call

{"level":"info","ts":"2025-12-02T20:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59eafa3d-4e19-4042-877c-4e0737371b4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:16358","PortSpecifier":{"PortValue":16358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.128.0.55:80","PortSpecifier":{"PortValue":80}}}}},"request":{"http":{"id":"59eafa3d-4e19-4042-877c-4e0737371b4c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.rosa.fttjk-2ixbb-srb.qeye.p3.openshiftapps.com","scheme":"http"}}}}
{"level":"error","ts":"2025-12-02T20:04:29Z","logger":"authorino.service.auth.authpipeline","msg":"failed to parse CEL expression","request id":"59eafa3d-4e19-4042-877c-4e0737371b4c","expression":"responseBodyJSON(\"/model\")","error":"ERROR: <input>:1:17: undeclared reference to 'responseBodyJSON' (in container '')\n | responseBodyJSON(\"/model\

nerdalert

#!/bin/bash
set -euo pipefail

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m'

log_info() { echo -e "${GREEN}[INFO]${NC} $1"; }

nerdalert

#!/usr/bin/env bash

set -euo pipefail

TAIL_LINES="${TAIL_LINES:-200}"
OUT_FILE="${OUT_FILE:-./maas-debug-$(date +%Y%m%d%H%M%S).txt}"

require_cmd() {
  if ! command -v "$1" >/dev/null 2>&1; then
    echo "Missing required command: $1" >&2

nerdalert

$ ./deployment/scripts/deploy-openshift.sh
=========================================
🚀 MaaS Platform OpenShift Deployment
=========================================

📋 Checking prerequisites...

Required tools:
  - oc: Client Version: 4.8.11
  - jq: jq-1.7

nerdalert

Telemetry logging errors in Authorino logs

You can see both metric labels spamming in the kuadrant logs example:

{"level":"error","ts":"2025-11-12T04:08:54Z","logger":"authorino.service.auth.authpipeline","msg":"failed to evaluate CEL expression","request id":"d2beaf26-c088-49c4-82e8-677e594df4eb","expression":"auth.identity.tier","error":"no such key: identity","stacktrace":"github.com/kuadrant/authorino/pkg/service.(*AuthPipeline).metricLabels\n\t/usr/src/authorino/pkg/service/auth_pipeline.go:546\ngithub.com/kuadrant/authorino/pkg/service.(*AuthPipeline).evaluateAuthConfig\n\t/usr/src/authorino/pkg/service/auth_pipeline.go:115\ngithub.com/kuadrant/authorino/pkg/service.(*AuthPipeline).evaluateIdentityConfigs.func1.(*AuthPipeline).evaluateOneAuthConfig.1\n\t/usr/src/authorino/pkg/service/auth_pipeline.go:171\ngithub.com/kuadrant/authorino/pkg/service.(*AuthPipeline).evaluateAuthConfigs.func1\n\t/usr/src/authorino/pkg/service/auth_pipeline.go:162"}
{"level":"error","ts":"2025-11-12T04:08:54Z","logge

nerdalert

#!/bin/bash

# OpenShift MaaS Platform Deployment Script
# This script automates the complete deployment of the MaaS platform on OpenShift

set -e

# Helper function to wait for CRD to be established
wait_for_crd() {
  local crd="$1"

nerdalert

MaaS Introspection Architecture

AuthPolicy Summary

Two AuthPolicies manage authentication:

• maas-control-plane (deploy/manifests/control-plane-auth-policy.yaml) - JWT auth for admin/management
• data-plane-auth-gateway (deploy/manifests/data-plane-introspect.yaml) - API key auth for model inference

Data Plane Call Workflow (Model Endpoint + API Key)

nerdalert

$ deployment/scripts/install.sh
[INFO] Detecting available deployments...
[INFO] Found deployments: basic gpu simulator
[INFO] Starting MaaS deployment installation
[INFO] Using deployment: simulator (simulator-deployment)
[INFO] Using existing CLUSTER_DOMAIN: apps.maas.octo-emerging.redhataicoe.com
[INFO] Installing dependencies...
🔧 Installing all MaaS dependencies...

🚀 Installing istio...

nerdalert

MaaS Platform Quickstart

This guide provides the essential commands for end-to-end validation of the MaaS platform.

Prerequisites

Set environment variables:

export CONTROL_BASE="http://maas.apps.maas2.octo-emerging.redhataicoe.com"

nerdalert

Instructions for enabling and disabling metrics in a running Kuadrant OLM deployment

• Kuadrant/kuadrant-operator patch (PR not opened yet)
• Kuadrant/wasm-shim patch

Load the patched Kuadrant operator:

kubectl -n kuadrant-system patch csv kuadrant-operator.v0.0.0 --type='json' \