Red HatMarkell RawlsExplainer
From token consumer to token provider: Building your org's AI API
Summary
Enterprise AI usage can become costly and fragmented when teams rely on separate provider accounts, personal keys, and independently operated inference stacks, leaving spending, workloads, and governance difficult to see. The post presents Model-as-a-Service (MaaS) in Red Hat OpenShift AI 3.4 as a shared service in which a platform team deploys approved models and exposes them through a standard, OpenAI-compatible API. Administrators can use the model catalog, distributed inference through llm-d on NVIDIA L40s, scoped API keys, rate limits, and dashboards for token use, latency, errors, GPU utilization, and queue length. Developers obtain self-service endpoints and can connect tools such as Claude Code, OpenCode, or Continue with existing clients. The architecture combines OpenShift, vLLM, an AI gateway, Prometheus, Grafana, and Jaeger to centralize inference, governance, and cost attribution across local and external model providers.
Context
AI adoption has left many organizations with separate provider accounts, unauthorized keys, independently deployed inference stacks, limited cost visibility, and insufficient governance over models processing internal data. The post also describes model deprecations breaking applications and cites a finding that 70 to 80% of employees using AI at work rely on employer-unapproved tools.
Approach / What changed
The proposed Model-as-a-Service pattern gives a platform team responsibility for validated model deployments and exposes them through a shared, OpenAI-compatible gateway. OpenShift AI provides a model catalog, self-service endpoints, scoped API keys, rate limits, observability, and routing to locally served or external models, with OpenShift, vLLM, llm-d, Prometheus, Grafana, and Jaeger supporting the architecture.
Takeaways
MaaS exposes approved models through an OpenAI-compatible /v1/chat/completions endpoint and can route requests to locally served vLLM models or external providers such as AWS Bedrock, Azure, and Anthropic.
API keys are generated for team access, scoped to policy, and revocable; admin-defined rate limits return HTTP 429 responses that standard clients can handle with backoff.
Prometheus, Grafana, and Jaeger support tracking token consumption, request rates, latency, errors, GPU utilization, and distributed traces.
Source and freshness
- Source
- developers.redhat.com
- Published
- Added to Yomu
Summaries are generated from the original by a language model. Check the original before relying on it.
Keep reading
Related reading
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
The best engineering reads, once a week
One useful email. Unsubscribe anytime.