Two AuthPolicies manage authentication:

• maas-control-plane (deploy/manifests/control-plane-auth-policy.yaml) - JWT auth for admin/management
• data-plane-auth-gateway (deploy/manifests/data-plane-introspect.yaml) - API key auth for model inference

This guide provides the essential commands for end-to-end validation of the MaaS platform.

Set environment variables:

export CONTROL_BASE="http://maas.apps.maas2.octo-emerging.redhataicoe.com"

• Kuadrant/kuadrant-operator patch (PR not opened yet)
• Kuadrant/wasm-shim patch

kubectl -n kuadrant-system patch csv kuadrant-operator.v0.0.0 --type='json' \

• llm-d-infra/charts/llm-d-infra/templates/gateway-infrastructure/gatewayparameters.yaml

{{ if and .Values.gateway.enabled (eq .Values.gateway.gatewayClassName "kgateway") .Values.gateway.gatewayParameters.enabled }}
apiVersion: gateway.kgateway.dev/v1alpha1
kind: GatewayParameters
metadata:
  name: {{ include "gateway.fullname" . }}
  labels: {{ include "common.labels.standard" . | nindent 4 }}
    app.kubernetes.io/gateway: {{ include "gateway.fullname" . }}

$ kubectl get envoyfilter --all-namespaces -o yaml
apiVersion: v1
items:
- apiVersion: networking.istio.io/v1alpha3
  kind: EnvoyFilter
  metadata:
    creationTimestamp: "2025-07-10T05:32:40Z"
    generation: 1
    labels:

Repo at llm-d/llm-d-inference-sim

podman || docker run --rm --net host ghcr.io/llm-d/llm-d-inference-sim \
  --port 8000 \
 --model "Qwen/Qwen2.5-1.5B-Instruct" \