{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8745abc-3f00-4b35-b741-248b040034ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8745abc-3f00-4b35-b741-248b040034ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38444","PortSpecifier":{"PortValue":38444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b453630-f2cc-497a-941c-789bc9e131c9","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38444","PortSpecifier":{"PortValue":38444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203790,"nanos":294989016},"http":{"id":"8b453630-f2cc-497a-941c-789bc9e131c9","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38456","PortSpecifier":{"PortValue":38456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38456","PortSpecifier":{"PortValue":38456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203791,"nanos":332058347},"http":{"id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc6e274a-122d-426e-8959-296392eea4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38472","PortSpecifier":{"PortValue":38472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc6e274a-122d-426e-8959-296392eea4a2","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc6e274a-122d-426e-8959-296392eea4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38472","PortSpecifier":{"PortValue":38472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203792,"nanos":372150061},"http":{"id":"dc6e274a-122d-426e-8959-296392eea4a2","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc6e274a-122d-426e-8959-296392eea4a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc6e274a-122d-426e-8959-296392eea4a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc6e274a-122d-426e-8959-296392eea4a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38478","PortSpecifier":{"PortValue":38478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38478","PortSpecifier":{"PortValue":38478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203793,"nanos":408534615},"http":{"id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38484","PortSpecifier":{"PortValue":38484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38484","PortSpecifier":{"PortValue":38484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203794,"nanos":445794831},"http":{"id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38486","PortSpecifier":{"PortValue":38486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38486","PortSpecifier":{"PortValue":38486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203795,"nanos":481683169},"http":{"id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38492","PortSpecifier":{"PortValue":38492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da343815-c9cd-4d65-a696-a98f7b925ed6","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38492","PortSpecifier":{"PortValue":38492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203796,"nanos":517888380},"http":{"id":"da343815-c9cd-4d65-a696-a98f7b925ed6","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38494","PortSpecifier":{"PortValue":38494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38494","PortSpecifier":{"PortValue":38494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203797,"nanos":551974338},"http":{"id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43060","PortSpecifier":{"PortValue":43060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","method":"POST","path":"/ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320/v1/completions","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43060","PortSpecifier":{"PortValue":43060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203797,"nanos":587714246},"http":{"id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MefkwfykJXefGbQo_JQQlSdhKcy7Z1uzIP7NPN16hGICFED0cGgAqumegL"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MefkwfykJXefGbQo_JQQlSdhKcy7Z1uzIP7NPN16hGICFED0cGgAqumegL\"}"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"67827b5d-0277-428d-8b5d-9d6d6d5a5ad2","keyName":"e2e-rate-b-569586","subscription":"e2e-rate-iso-b-569586","tenant":"e2e-shared-b-44b320","userId":"67827b5d-0277-428d-8b5d-9d6d6d5a5ad2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320\",\"requestedSubscription\":\"e2e-rate-iso-b-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m","name":"rate-test-model-44b320","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-569586","namespace":"ai-tenant-e2e-shared-b-44b320","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320"}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-569586"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"67827b5d-0277-428d-8b5d-9d6d6d5a5ad2","keyName":"e2e-rate-b-569586","selected_subscription":"e2e-rate-iso-b-569586","selected_subscription_key":"ai-tenant-e2e-shared-b-44b320/e2e-rate-iso-b-569586@ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m","name":"rate-test-model-44b320","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-569586","namespace":"ai-tenant-e2e-shared-b-44b320","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38660","PortSpecifier":{"PortValue":38660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38660","PortSpecifier":{"PortValue":38660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203870,"nanos":828221957},"http":{"id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","method":"POST","headers":{":authority":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38662","PortSpecifier":{"PortValue":38662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38662","PortSpecifier":{"PortValue":38662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203870,"nanos":883645531},"http":{"id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","method":"POST","headers":{":authority":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hm63tkYcuQKhlORd_EDEdOr9SycHPj560ZviCZtGYbycl6rMPsYQOhgWx9d1"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hm63tkYcuQKhlORd_EDEdOr9SycHPj560ZviCZtGYbycl6rMPsYQOhgWx9d1\"}"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2e6601d-74bd-4923-8d5e-9f88d582e61b","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"a2e6601d-74bd-4923-8d5e-9f88d582e61b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a2e6601d-74bd-4923-8d5e-9f88d582e61b","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"error","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7286019b-3171-4d23-a131-b49a69780388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45192","PortSpecifier":{"PortValue":45192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7286019b-3171-4d23-a131-b49a69780388","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7286019b-3171-4d23-a131-b49a69780388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45192","PortSpecifier":{"PortValue":45192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203918,"nanos":722390164},"http":{"id":"7286019b-3171-4d23-a131-b49a69780388","method":"POST","headers":{":authority":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7286019b-3171-4d23-a131-b49a69780388","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7286019b-3171-4d23-a131-b49a69780388","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-8a33ed/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7286019b-3171-4d23-a131-b49a69780388","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7286019b-3171-4d23-a131-b49a69780388","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:36262","PortSpecifier":{"PortValue":36262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","method":"POST","path":"/ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed/v1/chat/completions","host":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:36262","PortSpecifier":{"PortValue":36262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203920,"nanos":782385464},"http":{"id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","method":"POST","headers":{":authority":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C1rDZkmgSQhZvnmx_KiKlyN1yZIMVboXqYeUIKN4YYlUEQa5QX1AnMATowVp"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-8a33ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C1rDZkmgSQhZvnmx_KiKlyN1yZIMVboXqYeUIKN4YYlUEQa5QX1AnMATowVp\"}"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-8a33ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd51410c-a349-45b0-b82f-7f583a2197de","keyName":"e2e-ipp-8a33ed","subscription":"ipp-route-8a33ed-sub","tenant":"e2e-ipp-a-8a33ed","userId":"dd51410c-a349-45b0-b82f-7f583a2197de","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-8a33ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed\",\"requestedSubscription\":\"ipp-route-8a33ed-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-8a33ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-8a33ed/models/facebook/opt-125m","name":"ipp-route-8a33ed","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-8a33ed-sub","namespace":"ai-tenant-e2e-ipp-a-8a33ed","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed"}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-8a33ed/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-8a33ed-sub"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd51410c-a349-45b0-b82f-7f583a2197de","keyName":"e2e-ipp-8a33ed","selected_subscription":"ipp-route-8a33ed-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed-sub@ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-8a33ed/models/facebook/opt-125m","name":"ipp-route-8a33ed","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-8a33ed-sub","namespace":"ai-tenant-e2e-ipp-a-8a33ed","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"info","ts":"2026-07-28T01:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"info","ts":"2026-07-28T01:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}