Brent Salisbury nerdalert

$ ./deployment/scripts/deploy-openshift.sh
=========================================
🚀 MaaS Platform OpenShift Deployment
=========================================

📋 Checking prerequisites...

Required tools:

Logs from 1 inference call

{"level":"info","ts":"2025-12-02T20:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59eafa3d-4e19-4042-877c-4e0737371b4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:16358","PortSpecifier":{"PortValue":16358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.128.0.55:80","PortSpecifier":{"PortValue":80}}}}},"request":{"http":{"id":"59eafa3d-4e19-4042-877c-4e0737371b4c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.rosa.fttjk-2ixbb-srb.qeye.p3.openshiftapps.com","scheme":"http"}}}}
{"level":"error","ts":"2025-12-02T20:04:29Z","logger":"authorino.service.auth.authpipeline","msg":"failed to parse CEL expression","request id":"59eafa3d-4e19-4042-877c-4e0737371b4c","expression":"responseBodyJSON(\"/model\")","error":"ERROR: <input>:1:17: undeclared reference to 'responseBodyJSON' (in container '')\n | responseBodyJSON(\"/model\

Telemetry logging errors in Authorino logs

You can see both metric labels spamming in the kuadrant logs example:

{"level":"error","ts":"2025-11-12T04:08:54Z","logger":"authorino.service.auth.authpipeline","msg":"failed to evaluate CEL expression","request id":"d2beaf26-c088-49c4-82e8-677e594df4eb","expression":"auth.identity.tier","error":"no such key: identity","stacktrace":"github.com/kuadrant/authorino/pkg/service.(*AuthPipeline).metricLabels\n\t/usr/src/authorino/pkg/service/auth_pipeline.go:546\ngithub.com/kuadrant/authorino/pkg/service.(*AuthPipeline).evaluateAuthConfig\n\t/usr/src/authorino/pkg/service/auth_pipeline.go:115\ngithub.com/kuadrant/authorino/pkg/service.(*AuthPipeline).evaluateIdentityConfigs.func1.(*AuthPipeline).evaluateOneAuthConfig.1\n\t/usr/src/authorino/pkg/service/auth_pipeline.go:171\ngithub.com/kuadrant/authorino/pkg/service.(*AuthPipeline).evaluateAuthConfigs.func1\n\t/usr/src/authorino/pkg/service/auth_pipeline.go:162"}
{"level":"error","ts":"2025-11-12T04:08:54Z","logge

MaaS Introspection Architecture

AuthPolicy Summary

Two AuthPolicies manage authentication:

maas-control-plane (deploy/manifests/control-plane-auth-policy.yaml) - JWT auth for admin/management
data-plane-auth-gateway (deploy/manifests/data-plane-introspect.yaml) - API key auth for model inference

Data Plane Call Workflow (Model Endpoint + API Key)

MaaS Platform Quickstart

This guide provides the essential commands for end-to-end validation of the MaaS platform.

Prerequisites

Set environment variables:

export CONTROL_BASE="http://maas.apps.maas2.octo-emerging.redhataicoe.com"

	#!/bin/bash
	set -euo pipefail

	# Colors for output
	RED='\033[0;31m'
	GREEN='\033[0;32m'
	YELLOW='\033[1;33m'
	NC='\033[0m'

	log_info() { echo -e "${GREEN}[INFO]${NC} $1"; }

	#!/usr/bin/env bash

	set -euo pipefail

	TAIL_LINES="${TAIL_LINES:-200}"
	OUT_FILE="${OUT_FILE:-./maas-debug-$(date +%Y%m%d%H%M%S).txt}"

	require_cmd() {
	if ! command -v "$1" >/dev/null 2>&1; then
	echo "Missing required command: $1" >&2

	#!/bin/bash

	# OpenShift MaaS Platform Deployment Script
	# This script automates the complete deployment of the MaaS platform on OpenShift

	set -e

	# Helper function to wait for CRD to be established
	wait_for_crd() {
	local crd="$1"

	$ deployment/scripts/install.sh
	[INFO] Detecting available deployments...
	[INFO] Found deployments: basic gpu simulator
	[INFO] Starting MaaS deployment installation
	[INFO] Using deployment: simulator (simulator-deployment)
	[INFO] Using existing CLUSTER_DOMAIN: apps.maas.octo-emerging.redhataicoe.com
	[INFO] Installing dependencies...
	🔧 Installing all MaaS dependencies...

	🚀 Installing istio...

	$ ./deployment/scripts/deploy-openshift.sh
	=========================================
	🚀 MaaS Platform OpenShift Deployment
	=========================================

	📋 Checking prerequisites...

	Required tools:
	- oc: Client Version: 4.8.11
	- jq: jq-1.7