Examples
Examples
Concrete manifests and expected reconciliation outcomes for common InferenceIdentityBinding flows.
Reusable reference inputs for e2e tests and demo docs live under
test/reference/inference-environment/. Those manifests represent externally
managed workload and GAIE resources that exist before kleym-operator
reconciles a binding.
Before You Apply Examples
These examples assume:
- Gateway API Inference Extension (GAIE) CRDs are installed for
InferencePool, and forInferenceObjectivewhen usingPerObjective - SPIFFE Runtime Environment (SPIRE) Controller Manager is installed with the
ClusterSPIFFEIDCRD kleym-operatoris running
The manifests show the GAIE fields kleym-operator consumes. For full GAIE
object shape and additional optional fields, use the GAIE API types index.
For SPIFFE and SPIRE background, see SPIFFE overview and SPIRE concepts.
Example Paths
| Example | Use it when | Outcome |
|---|---|---|
| Basic Binding | You need one identity per serving pool. | One managed ClusterSPIFFEID in PoolOnly mode. |
| PerObjective | Multiple objectives share a pool but need distinct identities. | One managed ClusterSPIFFEID per objective with a container-name selector. |
Recommended Reading Order
- Start with Basic Binding to validate end-to-end wiring.
- Move to PerObjective to apply model-level identity boundaries.
- Review Conditions and Troubleshooting if reconciliation does not reach
Ready=True.
Last updated on