{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"329b0841-8101-4079-82e6-ccf14fe7fd03","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781baaa21e14"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cfd92b4a-3297-40bb-9e75-f688a6bb68a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e58b493b-5949-4805-94d3-1b317efc91ff","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"329b0841-8101-4079-82e6-ccf14fe7fd03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"329b0841-8101-4079-82e6-ccf14fe7fd03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"329b0841-8101-4079-82e6-ccf14fe7fd03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cf82b3/sub-test-model-cf82b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cf82b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"329b0841-8101-4079-82e6-ccf14fe7fd03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"329b0841-8101-4079-82e6-ccf14fe7fd03","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"329b0841-8101-4079-82e6-ccf14fe7fd03","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"329b0841-8101-4079-82e6-ccf14fe7fd03","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"329b0841-8101-4079-82e6-ccf14fe7fd03","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0da0705d-83fa-41f9-8fec-8610085023fb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689521,"nanos":355787732},"http":{"id":"0da0705d-83fa-41f9-8fec-8610085023fb","method":"POST","headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1K1N0hAftHS1EDLkM_QTPV6y3HcV6kswfUNELYE0cEzrifdaVVrgIAcQLCvZk"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1K1N0hAftHS1EDLkM_QTPV6y3HcV6kswfUNELYE0cEzrifdaVVrgIAcQLCvZk\"}"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8bcf355-9907-4a83-b71a-682a9f424aa4","keyName":"e2e-sub-iso-f8d711","subscription":"e2e-shared-sub-7d7b1c","tenant":"e2e-shared-a-d8076c","userId":"c8bcf355-9907-4a83-b71a-682a9f424aa4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d8076c/sub-test-model-d8076c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d8076c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7d7b1c"}
{"level":"info","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0da0705d-83fa-41f9-8fec-8610085023fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35324","PortSpecifier":{"PortValue":35324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"637d4550-4439-4136-b6ae-984c5c56f0dc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35324","PortSpecifier":{"PortValue":35324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689521,"nanos":387100600},"http":{"id":"637d4550-4439-4136-b6ae-984c5c56f0dc","method":"POST","headers":{":authority":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LDvQQb8dOFYrj9E9_WTZ4vOVdPavhFj9la0cmTXUSMnWXCqJcAFnNp28ne0B"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cf82b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LDvQQb8dOFYrj9E9_WTZ4vOVdPavhFj9la0cmTXUSMnWXCqJcAFnNp28ne0B\"}"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cf82b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"19dd2d66-49e5-43eb-a13b-07429595d429","keyName":"e2e-sub-iso-2b83b3","subscription":"e2e-shared-sub-7d7b1c","tenant":"e2e-shared-b-cf82b3","userId":"19dd2d66-49e5-43eb-a13b-07429595d429","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cf82b3/sub-test-model-cf82b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cf82b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7d7b1c"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"637d4550-4439-4136-b6ae-984c5c56f0dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7922263dcedcf50a728b9f3d1ab6a404b1241037d62d8f23bf4090503132c115"}
{"level":"info","ts":"2026-07-22T03:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63"}
{"level":"info","ts":"2026-07-22T03:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5e26d1bc4b8cbbe6788ead3b2238b47965bb53a99d20564aef369af19412f67"}
{"level":"info","ts":"2026-07-22T03:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a37085959126b38c074206cf646522e1152d89937a3b2174730599ed0718be8d"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2cbafc790ba9b09727d4bb31fe672b677a48bfb98e3e5b991b23503ce617c1a"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfc81bc8eb59cb0db0e2e3f0a96fb763085c2435a7270387c473a3682c145094"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4816b37bbfac3a09f92e1c05dbe5db0c874f1936b037fe11b6b3f7d11e6f613"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e205f3e8a10c2135d7a05d8c844c63698dba51f21cf695eadcc9b46c97e0a8f9"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2326a0217e47bf7ab51fbaf7b1d90c923b9572aef88af8c189b31355f760c65"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99a6a18cb33f6fd8620ba36159d46709fe8be301724f8b74052fb6718614a733"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86171da688ae79dfe7015a2c7c81a0d0cb1b170af851c2a0047b249908080c66"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b594de20f56339731be483fb7658beb45d7457ff79017a517e356623585d7555"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed5816712bfeadcbf37f414a81ba96d3fa71e821873c4227e2abfbde3c5df1ba"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2f64f81269bfc51d1e48de20e4df62eb37b5f97b51700b63968c35cb6bcd8fb"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32bac40fe07fb7187c2a32130ebd78cc4a75c3ed9874a6ff2fe0f8e034c2b1a6"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfc1bbbca189fb17ec473299a316193ddd2b387e2a80fe6ed1178bc8eda7de98"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ea124808d21dcf370a9fb5268cc8228f24e4c6d5895bf7fb62c04f8aa7ac84f"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dcae373f3bba61f49560f1562164ac4dd63fcb8255f8a26654f7ef8a08c7e75"}
{"level":"info","ts":"2026-07-22T03:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861"}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f"}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f"}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f"}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4"}
{"level":"error","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4"}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4"}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63"}
{"level":"debug","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63"}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c"}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7deeee07986c129d0d681b519d0193ddd37391daa93a5198a3a738ccfc7a5252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7deeee07986c129d0d681b519d0193ddd37391daa93a5198a3a738ccfc7a5252"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7deeee07986c129d0d681b519d0193ddd37391daa93a5198a3a738ccfc7a5252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7deeee07986c129d0d681b519d0193ddd37391daa93a5198a3a738ccfc7a5252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7deeee07986c129d0d681b519d0193ddd37391daa93a5198a3a738ccfc7a5252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7deeee07986c129d0d681b519d0193ddd37391daa93a5198a3a738ccfc7a5252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b2f53501233976d663e09c55ec1147f2956b3e50c9d187907049d5073411fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b2f53501233976d663e09c55ec1147f2956b3e50c9d187907049d5073411fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7deeee07986c129d0d681b519d0193ddd37391daa93a5198a3a738ccfc7a5252"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b2f53501233976d663e09c55ec1147f2956b3e50c9d187907049d5073411fe4"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7deeee07986c129d0d681b519d0193ddd37391daa93a5198a3a738ccfc7a5252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b2f53501233976d663e09c55ec1147f2956b3e50c9d187907049d5073411fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b2f53501233976d663e09c55ec1147f2956b3e50c9d187907049d5073411fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b2f53501233976d663e09c55ec1147f2956b3e50c9d187907049d5073411fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9d5f504a25acf848a4a9d7a6a7d6ed7ed49ec473def137c4f0bdf0342a64996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9d5f504a25acf848a4a9d7a6a7d6ed7ed49ec473def137c4f0bdf0342a64996","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b2f53501233976d663e09c55ec1147f2956b3e50c9d187907049d5073411fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"723ecd63d1619eb0a9c723076a4a09f0bef46ff91293fac0c51dcf3c72bd4ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9d5f504a25acf848a4a9d7a6a7d6ed7ed49ec473def137c4f0bdf0342a64996"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"723ecd63d1619eb0a9c723076a4a09f0bef46ff91293fac0c51dcf3c72bd4ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9d5f504a25acf848a4a9d7a6a7d6ed7ed49ec473def137c4f0bdf0342a64996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9d5f504a25acf848a4a9d7a6a7d6ed7ed49ec473def137c4f0bdf0342a64996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b2f53501233976d663e09c55ec1147f2956b3e50c9d187907049d5073411fe4"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9d5f504a25acf848a4a9d7a6a7d6ed7ed49ec473def137c4f0bdf0342a64996","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723ecd63d1619eb0a9c723076a4a09f0bef46ff91293fac0c51dcf3c72bd4ddd"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b56077cb23d14f97ac0dfb15d7d23ac92ae3ceb011c47295ee5ba49cd9170098"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d69225fafe01d98c31e33c65a5eb7dc91fbdb1bf579f0d81f917091c4fcfc05"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/804b481ad7e613e26acfdfafee33cbb00e08c36093350de9c326c5f36adac6ac"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b56077cb23d14f97ac0dfb15d7d23ac92ae3ceb011c47295ee5ba49cd9170098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b56077cb23d14f97ac0dfb15d7d23ac92ae3ceb011c47295ee5ba49cd9170098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081b1c0d05f06fae52051912966c81dcc7a3ca3a039f7f982ddfd40eb76f55f1"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726da283d25181ed25e70003f1c895a95b9198908022b5c4b6206269cf596001"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9d5f504a25acf848a4a9d7a6a7d6ed7ed49ec473def137c4f0bdf0342a64996"}
{"level":"info","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b56077cb23d14f97ac0dfb15d7d23ac92ae3ceb011c47295ee5ba49cd9170098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d69225fafe01d98c31e33c65a5eb7dc91fbdb1bf579f0d81f917091c4fcfc05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d69225fafe01d98c31e33c65a5eb7dc91fbdb1bf579f0d81f917091c4fcfc05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2326a0217e47bf7ab51fbaf7b1d90c923b9572aef88af8c189b31355f760c65"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d69225fafe01d98c31e33c65a5eb7dc91fbdb1bf579f0d81f917091c4fcfc05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"804b481ad7e613e26acfdfafee33cbb00e08c36093350de9c326c5f36adac6ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["804b481ad7e613e26acfdfafee33cbb00e08c36093350de9c326c5f36adac6ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be7ff32b3f87c7ba76ca1d4731538ec942c4eb3a50b7f9d106c2d0c745d1c6f2"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea64e70cdf2a1059a4fa88581dd381e9928826523d19d5d77ce17dcf21dedd2"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"804b481ad7e613e26acfdfafee33cbb00e08c36093350de9c326c5f36adac6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081b1c0d05f06fae52051912966c81dcc7a3ca3a039f7f982ddfd40eb76f55f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["081b1c0d05f06fae52051912966c81dcc7a3ca3a039f7f982ddfd40eb76f55f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b56077cb23d14f97ac0dfb15d7d23ac92ae3ceb011c47295ee5ba49cd9170098"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081b1c0d05f06fae52051912966c81dcc7a3ca3a039f7f982ddfd40eb76f55f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"723ecd63d1619eb0a9c723076a4a09f0bef46ff91293fac0c51dcf3c72bd4ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["723ecd63d1619eb0a9c723076a4a09f0bef46ff91293fac0c51dcf3c72bd4ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d69225fafe01d98c31e33c65a5eb7dc91fbdb1bf579f0d81f917091c4fcfc05"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/804b481ad7e613e26acfdfafee33cbb00e08c36093350de9c326c5f36adac6ac"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"723ecd63d1619eb0a9c723076a4a09f0bef46ff91293fac0c51dcf3c72bd4ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726da283d25181ed25e70003f1c895a95b9198908022b5c4b6206269cf596001","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["726da283d25181ed25e70003f1c895a95b9198908022b5c4b6206269cf596001"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081b1c0d05f06fae52051912966c81dcc7a3ca3a039f7f982ddfd40eb76f55f1"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723ecd63d1619eb0a9c723076a4a09f0bef46ff91293fac0c51dcf3c72bd4ddd"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"726da283d25181ed25e70003f1c895a95b9198908022b5c4b6206269cf596001","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9d5f504a25acf848a4a9d7a6a7d6ed7ed49ec473def137c4f0bdf0342a64996","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726da283d25181ed25e70003f1c895a95b9198908022b5c4b6206269cf596001"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2326a0217e47bf7ab51fbaf7b1d90c923b9572aef88af8c189b31355f760c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2326a0217e47bf7ab51fbaf7b1d90c923b9572aef88af8c189b31355f760c65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2326a0217e47bf7ab51fbaf7b1d90c923b9572aef88af8c189b31355f760c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be7ff32b3f87c7ba76ca1d4731538ec942c4eb3a50b7f9d106c2d0c745d1c6f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be7ff32b3f87c7ba76ca1d4731538ec942c4eb3a50b7f9d106c2d0c745d1c6f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2326a0217e47bf7ab51fbaf7b1d90c923b9572aef88af8c189b31355f760c65"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be7ff32b3f87c7ba76ca1d4731538ec942c4eb3a50b7f9d106c2d0c745d1c6f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea64e70cdf2a1059a4fa88581dd381e9928826523d19d5d77ce17dcf21dedd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea64e70cdf2a1059a4fa88581dd381e9928826523d19d5d77ce17dcf21dedd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be7ff32b3f87c7ba76ca1d4731538ec942c4eb3a50b7f9d106c2d0c745d1c6f2"}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea64e70cdf2a1059a4fa88581dd381e9928826523d19d5d77ce17dcf21dedd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b56077cb23d14f97ac0dfb15d7d23ac92ae3ceb011c47295ee5ba49cd9170098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d69225fafe01d98c31e33c65a5eb7dc91fbdb1bf579f0d81f917091c4fcfc05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"804b481ad7e613e26acfdfafee33cbb00e08c36093350de9c326c5f36adac6ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"081b1c0d05f06fae52051912966c81dcc7a3ca3a039f7f982ddfd40eb76f55f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723ecd63d1619eb0a9c723076a4a09f0bef46ff91293fac0c51dcf3c72bd4ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"726da283d25181ed25e70003f1c895a95b9198908022b5c4b6206269cf596001","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2326a0217e47bf7ab51fbaf7b1d90c923b9572aef88af8c189b31355f760c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be7ff32b3f87c7ba76ca1d4731538ec942c4eb3a50b7f9d106c2d0c745d1c6f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea64e70cdf2a1059a4fa88581dd381e9928826523d19d5d77ce17dcf21dedd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T03:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea64e70cdf2a1059a4fa88581dd381e9928826523d19d5d77ce17dcf21dedd2"}
{"level":"info","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41674","PortSpecifier":{"PortValue":41674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29d23b06-8bb3-4a36-8da3-3305de921b48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41674","PortSpecifier":{"PortValue":41674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689599,"nanos":971974097},"http":{"id":"29d23b06-8bb3-4a36-8da3-3305de921b48","method":"POST","headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e58b493b-5949-4805-94d3-1b317efc91ff","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cfd92b4a-3297-40bb-9e75-f688a6bb68a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781baaa21e14"]}}
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781baaa21e14"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cfd92b4a-3297-40bb-9e75-f688a6bb68a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e58b493b-5949-4805-94d3-1b317efc91ff","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d8076c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29d23b06-8bb3-4a36-8da3-3305de921b48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38188","PortSpecifier":{"PortValue":38188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b10ec1a-90ec-4801-a04e-51393d31d124","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38188","PortSpecifier":{"PortValue":38188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689600,"nanos":11221244},"http":{"id":"6b10ec1a-90ec-4801-a04e-51393d31d124","method":"POST","headers":{":authority":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e58b493b-5949-4805-94d3-1b317efc91ff","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cfd92b4a-3297-40bb-9e75-f688a6bb68a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781baaa21e14"]}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781baaa21e14"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cfd92b4a-3297-40bb-9e75-f688a6bb68a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e58b493b-5949-4805-94d3-1b317efc91ff","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cf82b3/rate-test-model-cf82b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cf82b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b10ec1a-90ec-4801-a04e-51393d31d124","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41676","PortSpecifier":{"PortValue":41676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7521f1e-672f-483e-b694-1c4e601fde8b","method":"POST","path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions","host":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41676","PortSpecifier":{"PortValue":41676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689600,"nanos":50840022},"http":{"id":"a7521f1e-672f-483e-b694-1c4e601fde8b","method":"POST","headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8qxk6NUgRO44jwvv_wwPoobpU7gMHnSjGsOPbgQK2NXBS1jtxFUeKqUiWga9"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8qxk6NUgRO44jwvv_wwPoobpU7gMHnSjGsOPbgQK2NXBS1jtxFUeKqUiWga9\"}"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30b0a776-e47a-446a-b498-8da36d6df5a7","keyName":"e2e-rate-a-09f619","subscription":"e2e-rate-iso-a-09f619","tenant":"e2e-shared-a-d8076c","userId":"30b0a776-e47a-446a-b498-8da36d6df5a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\",\"requestedSubscription\":\"e2e-rate-iso-a-09f619\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f619","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d8076c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09f619"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30b0a776-e47a-446a-b498-8da36d6df5a7","keyName":"e2e-rate-a-09f619","selected_subscription":"e2e-rate-iso-a-09f619","selected_subscription_key":"ai-tenant-e2e-shared-a-d8076c/e2e-rate-iso-a-09f619@ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f619","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7521f1e-672f-483e-b694-1c4e601fde8b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41680","PortSpecifier":{"PortValue":41680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","method":"POST","path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions","host":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41680","PortSpecifier":{"PortValue":41680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689601,"nanos":112721754},"http":{"id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","method":"POST","headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8qxk6NUgRO44jwvv_wwPoobpU7gMHnSjGsOPbgQK2NXBS1jtxFUeKqUiWga9"}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8qxk6NUgRO44jwvv_wwPoobpU7gMHnSjGsOPbgQK2NXBS1jtxFUeKqUiWga9\"}"}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30b0a776-e47a-446a-b498-8da36d6df5a7","keyName":"e2e-rate-a-09f619","subscription":"e2e-rate-iso-a-09f619","tenant":"e2e-shared-a-d8076c","userId":"30b0a776-e47a-446a-b498-8da36d6df5a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\",\"requestedSubscription\":\"e2e-rate-iso-a-09f619\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f619","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"}}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d8076c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09f619"}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30b0a776-e47a-446a-b498-8da36d6df5a7","keyName":"e2e-rate-a-09f619","selected_subscription":"e2e-rate-iso-a-09f619","selected_subscription_key":"ai-tenant-e2e-shared-a-d8076c/e2e-rate-iso-a-09f619@ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f619","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b700fdb9-7056-4c20-b73c-b1d5fde05f30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d25875bf-e828-45cb-b70b-a990a811c260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41682","PortSpecifier":{"PortValue":41682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d25875bf-e828-45cb-b70b-a990a811c260","method":"POST","path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions","host":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d25875bf-e828-45cb-b70b-a990a811c260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41682","PortSpecifier":{"PortValue":41682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689602,"nanos":148965703},"http":{"id":"d25875bf-e828-45cb-b70b-a990a811c260","method":"POST","headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8qxk6NUgRO44jwvv_wwPoobpU7gMHnSjGsOPbgQK2NXBS1jtxFUeKqUiWga9"}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8qxk6NUgRO44jwvv_wwPoobpU7gMHnSjGsOPbgQK2NXBS1jtxFUeKqUiWga9\"}"}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30b0a776-e47a-446a-b498-8da36d6df5a7","keyName":"e2e-rate-a-09f619","subscription":"e2e-rate-iso-a-09f619","tenant":"e2e-shared-a-d8076c","userId":"30b0a776-e47a-446a-b498-8da36d6df5a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\",\"requestedSubscription\":\"e2e-rate-iso-a-09f619\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f619","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"}}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d25875bf-e828-45cb-b70b-a990a811c260","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d8076c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09f619"}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d25875bf-e828-45cb-b70b-a990a811c260","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30b0a776-e47a-446a-b498-8da36d6df5a7","keyName":"e2e-rate-a-09f619","selected_subscription":"e2e-rate-iso-a-09f619","selected_subscription_key":"ai-tenant-e2e-shared-a-d8076c/e2e-rate-iso-a-09f619@ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09f619","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d25875bf-e828-45cb-b70b-a990a811c260","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d25875bf-e828-45cb-b70b-a990a811c260","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47778","PortSpecifier":{"PortValue":47778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47778","PortSpecifier":{"PortValue":47778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689615,"nanos":96598179},"http":{"id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","method":"POST","headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e58b493b-5949-4805-94d3-1b317efc91ff","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cfd92b4a-3297-40bb-9e75-f688a6bb68a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781baaa21e14"]}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781baaa21e14"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cfd92b4a-3297-40bb-9e75-f688a6bb68a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e58b493b-5949-4805-94d3-1b317efc91ff","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d8076c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43f1936b-47e6-4447-ab1d-0eff6b67b337","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57802","PortSpecifier":{"PortValue":57802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"235fe5e1-ccec-426c-838b-7db1009926cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57802","PortSpecifier":{"PortValue":57802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689615,"nanos":134841797},"http":{"id":"235fe5e1-ccec-426c-838b-7db1009926cc","method":"POST","headers":{":authority":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e58b493b-5949-4805-94d3-1b317efc91ff","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cfd92b4a-3297-40bb-9e75-f688a6bb68a9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781baaa21e14"]}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781baaa21e14"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cfd92b4a-3297-40bb-9e75-f688a6bb68a9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e58b493b-5949-4805-94d3-1b317efc91ff","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cf82b3/rate-test-model-cf82b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cf82b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235fe5e1-ccec-426c-838b-7db1009926cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47792","PortSpecifier":{"PortValue":47792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","method":"POST","path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions","host":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47792","PortSpecifier":{"PortValue":47792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689615,"nanos":164095424},"http":{"id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","method":"POST","headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sJzx5oy8V7h56ugw_oopkitu9bUcv1J8KEe7QMElVVscPt2D2Fu9Wy9BBCro"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sJzx5oy8V7h56ugw_oopkitu9bUcv1J8KEe7QMElVVscPt2D2Fu9Wy9BBCro\"}"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d7369b6-6414-460e-bb37-4a9ac43b3d6f","keyName":"e2e-rate-a-a0e537","subscription":"e2e-rate-iso-a-a0e537","tenant":"e2e-shared-a-d8076c","userId":"6d7369b6-6414-460e-bb37-4a9ac43b3d6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\",\"requestedSubscription\":\"e2e-rate-iso-a-a0e537\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0e537","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d8076c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0e537"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d7369b6-6414-460e-bb37-4a9ac43b3d6f","keyName":"e2e-rate-a-a0e537","selected_subscription":"e2e-rate-iso-a-a0e537","selected_subscription_key":"ai-tenant-e2e-shared-a-d8076c/e2e-rate-iso-a-a0e537@ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0e537","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd7b4a7-a958-44dd-8047-0a9f74addb4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47796","PortSpecifier":{"PortValue":47796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","method":"POST","path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions","host":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47796","PortSpecifier":{"PortValue":47796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689616,"nanos":199670664},"http":{"id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","method":"POST","headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sJzx5oy8V7h56ugw_oopkitu9bUcv1J8KEe7QMElVVscPt2D2Fu9Wy9BBCro"}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sJzx5oy8V7h56ugw_oopkitu9bUcv1J8KEe7QMElVVscPt2D2Fu9Wy9BBCro\"}"}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d7369b6-6414-460e-bb37-4a9ac43b3d6f","keyName":"e2e-rate-a-a0e537","subscription":"e2e-rate-iso-a-a0e537","tenant":"e2e-shared-a-d8076c","userId":"6d7369b6-6414-460e-bb37-4a9ac43b3d6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\",\"requestedSubscription\":\"e2e-rate-iso-a-a0e537\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0e537","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"}}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d8076c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0e537"}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d7369b6-6414-460e-bb37-4a9ac43b3d6f","keyName":"e2e-rate-a-a0e537","selected_subscription":"e2e-rate-iso-a-a0e537","selected_subscription_key":"ai-tenant-e2e-shared-a-d8076c/e2e-rate-iso-a-a0e537@ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0e537","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae54dc6-5a0f-4dac-ad6e-48b297a6df78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47802","PortSpecifier":{"PortValue":47802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","method":"POST","path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions","host":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47802","PortSpecifier":{"PortValue":47802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689617,"nanos":237586647},"http":{"id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","method":"POST","headers":{":authority":"e2e-shared-a-d8076c.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sJzx5oy8V7h56ugw_oopkitu9bUcv1J8KEe7QMElVVscPt2D2Fu9Wy9BBCro"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sJzx5oy8V7h56ugw_oopkitu9bUcv1J8KEe7QMElVVscPt2D2Fu9Wy9BBCro\"}"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d7369b6-6414-460e-bb37-4a9ac43b3d6f","keyName":"e2e-rate-a-a0e537","subscription":"e2e-rate-iso-a-a0e537","tenant":"e2e-shared-a-d8076c","userId":"6d7369b6-6414-460e-bb37-4a9ac43b3d6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\",\"requestedSubscription\":\"e2e-rate-iso-a-a0e537\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d8076c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0e537","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d8076c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0e537"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d7369b6-6414-460e-bb37-4a9ac43b3d6f","keyName":"e2e-rate-a-a0e537","selected_subscription":"e2e-rate-iso-a-a0e537","selected_subscription_key":"ai-tenant-e2e-shared-a-d8076c/e2e-rate-iso-a-a0e537@ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d8076c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0e537","namespace":"ai-tenant-e2e-shared-a-d8076c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d8076c/rate-test-model-d8076c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c7392ee-f344-4dec-8b65-e66cc23d62fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57814","PortSpecifier":{"PortValue":57814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb604f7e-41a8-4caf-8283-691deea5056f","method":"POST","path":"/ai-tenant-e2e-shared-b-cf82b3/rate-test-model-cf82b3/v1/completions","host":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57814","PortSpecifier":{"PortValue":57814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689617,"nanos":271434312},"http":{"id":"eb604f7e-41a8-4caf-8283-691deea5056f","method":"POST","headers":{":authority":"e2e-shared-b-cf82b3.apps.39dd61ed-cb03-410c-bf2a-781baaa21e14.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-cf82b3/rate-test-model-cf82b3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16ZoGX584NhRsIjhN_lo1Raoe3UYOuTBlAAF90DxOPCVxZ0HxgEZ41gY9jslB"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cf82b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16ZoGX584NhRsIjhN_lo1Raoe3UYOuTBlAAF90DxOPCVxZ0HxgEZ41gY9jslB\"}"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cf82b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f15b8094-111a-4d05-b447-9e6063dcfbad","keyName":"e2e-rate-b-a0e537","subscription":"e2e-rate-iso-b-a0e537","tenant":"e2e-shared-b-cf82b3","userId":"f15b8094-111a-4d05-b447-9e6063dcfbad","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-cf82b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-cf82b3/rate-test-model-cf82b3\",\"requestedSubscription\":\"e2e-rate-iso-b-a0e537\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cf82b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf82b3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a0e537","namespace":"ai-tenant-e2e-shared-b-cf82b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-cf82b3/rate-test-model-cf82b3"}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cf82b3/rate-test-model-cf82b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cf82b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a0e537"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f15b8094-111a-4d05-b447-9e6063dcfbad","keyName":"e2e-rate-b-a0e537","selected_subscription":"e2e-rate-iso-b-a0e537","selected_subscription_key":"ai-tenant-e2e-shared-b-cf82b3/e2e-rate-iso-b-a0e537@ai-tenant-e2e-shared-b-cf82b3/rate-test-model-cf82b3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf82b3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a0e537","namespace":"ai-tenant-e2e-shared-b-cf82b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-cf82b3/rate-test-model-cf82b3"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T03:06:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb604f7e-41a8-4caf-8283-691deea5056f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T03:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abafb2f21e6f4fe5bf8c1c65bdf29194411a212504746fbd19ee6ff322eddf4f"}
{"level":"info","ts":"2026-07-22T03:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd84c2ed5a4c5312a958217c8fc6fd6bf5ee785d9f9999b93bf62656e783efa1"}
{"level":"info","ts":"2026-07-22T03:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/862a3e0b80a2589f480fbacdb47b42c347c9ba3d294a3e70e7b2d3e488ca5f63"}
{"level":"info","ts":"2026-07-22T03:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9d5f504a25acf848a4a9d7a6a7d6ed7ed49ec473def137c4f0bdf0342a64996"}
{"level":"info","ts":"2026-07-22T03:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b56077cb23d14f97ac0dfb15d7d23ac92ae3ceb011c47295ee5ba49cd9170098"}
{"level":"info","ts":"2026-07-22T03:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b15329269750706e206a2c300f6e93c0de919c364c703a4a0b553b56aec40da4"}
{"level":"info","ts":"2026-07-22T03:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/081b1c0d05f06fae52051912966c81dcc7a3ca3a039f7f982ddfd40eb76f55f1"}
{"level":"info","ts":"2026-07-22T03:07:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e8e4bc2a4f98f288dca090633b08f0c3ae00f1f5421dfda713fa4d8b6c2fdc"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c64e59c94a0d84bff5f5362a14419002386d043d29a06466c3c522ed8e33cb85"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/804b481ad7e613e26acfdfafee33cbb00e08c36093350de9c326c5f36adac6ac"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b453f1753b493f9ffbe7dec0e8f8c123e964f4c9c6ceb22e493f03d246fa063c"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b8411a48aac59e407de3484773d11f0cd8ba0c471135f542eab1de833cdd861"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d43a0082f1f0c0cba0393f1910ffe175c74021983b3d737fa240e09dc92440ad"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/723ecd63d1619eb0a9c723076a4a09f0bef46ff91293fac0c51dcf3c72bd4ddd"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7deeee07986c129d0d681b519d0193ddd37391daa93a5198a3a738ccfc7a5252"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ea64e70cdf2a1059a4fa88581dd381e9928826523d19d5d77ce17dcf21dedd2"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/726da283d25181ed25e70003f1c895a95b9198908022b5c4b6206269cf596001"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be7ff32b3f87c7ba76ca1d4731538ec942c4eb3a50b7f9d106c2d0c745d1c6f2"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fe49c258aceaeadd2692b9f4201c8ddebffe87a38397df2cf881f8e42238518"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2b7f9865d9f7e30be0b24eb5f1da37aa418a6e711045b2a848fb3be3888269f"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b2f53501233976d663e09c55ec1147f2956b3e50c9d187907049d5073411fe4"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f4c5c5cc1746d2fd1a1edd3b7e5579f990824f34afe0bbd7ac0a6adbce3731b"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2326a0217e47bf7ab51fbaf7b1d90c923b9572aef88af8c189b31355f760c65"}
{"level":"info","ts":"2026-07-22T03:07:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d69225fafe01d98c31e33c65a5eb7dc91fbdb1bf579f0d81f917091c4fcfc05"}