{"level":"error","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd"}
{"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"error","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54574","PortSpecifier":{"PortValue":54574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54574","PortSpecifier":{"PortValue":54574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746846,"nanos":44800312},"http":{"id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40690","PortSpecifier":{"PortValue":40690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40690","PortSpecifier":{"PortValue":40690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746846,"nanos":82800746},"http":{"id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54576","PortSpecifier":{"PortValue":54576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54576","PortSpecifier":{"PortValue":54576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746846,"nanos":122772946},"http":{"id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54580","PortSpecifier":{"PortValue":54580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54580","PortSpecifier":{"PortValue":54580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746847,"nanos":178472890},"http":{"id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54590","PortSpecifier":{"PortValue":54590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54590","PortSpecifier":{"PortValue":54590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746848,"nanos":222027264},"http":{"id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54606","PortSpecifier":{"PortValue":54606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54606","PortSpecifier":{"PortValue":54606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746849,"nanos":262532514},"http":{"id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54610","PortSpecifier":{"PortValue":54610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fdc50ec-6198-493a-8822-3e88590b6ece","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54610","PortSpecifier":{"PortValue":54610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746850,"nanos":297437866},"http":{"id":"6fdc50ec-6198-493a-8822-3e88590b6ece","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54618","PortSpecifier":{"PortValue":54618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54618","PortSpecifier":{"PortValue":54618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746851,"nanos":336959042},"http":{"id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82557856-d387-4d5f-bff3-79345c0dce0d","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746852,"nanos":375762537},"http":{"id":"82557856-d387-4d5f-bff3-79345c0dce0d","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51532","PortSpecifier":{"PortValue":51532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51532","PortSpecifier":{"PortValue":51532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746861,"nanos":135333570},"http":{"id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37736","PortSpecifier":{"PortValue":37736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37736","PortSpecifier":{"PortValue":37736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746861,"nanos":175723451},"http":{"id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58945e10-9591-43df-aff3-a81db070d6af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51542","PortSpecifier":{"PortValue":51542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58945e10-9591-43df-aff3-a81db070d6af","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58945e10-9591-43df-aff3-a81db070d6af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51542","PortSpecifier":{"PortValue":51542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746861,"nanos":218063397},"http":{"id":"58945e10-9591-43df-aff3-a81db070d6af","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs\"}"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","subscription":"e2e-rate-iso-a-4366e8","tenant":"e2e-shared-a-d24283","userId":"1fc46efb-e517-4e84-983e-e58810b5a540","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-4366e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58945e10-9591-43df-aff3-a81db070d6af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4366e8"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","selected_subscription":"e2e-rate-iso-a-4366e8","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-4366e8@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58945e10-9591-43df-aff3-a81db070d6af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58945e10-9591-43df-aff3-a81db070d6af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51550","PortSpecifier":{"PortValue":51550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51550","PortSpecifier":{"PortValue":51550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746862,"nanos":258820140},"http":{"id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs"}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs\"}"}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","subscription":"e2e-rate-iso-a-4366e8","tenant":"e2e-shared-a-d24283","userId":"1fc46efb-e517-4e84-983e-e58810b5a540","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-4366e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4366e8"}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","selected_subscription":"e2e-rate-iso-a-4366e8","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-4366e8@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada90bc2-53ae-46ef-b951-020761680aae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ada90bc2-53ae-46ef-b951-020761680aae","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada90bc2-53ae-46ef-b951-020761680aae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746863,"nanos":298239359},"http":{"id":"ada90bc2-53ae-46ef-b951-020761680aae","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs\"}"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","subscription":"e2e-rate-iso-a-4366e8","tenant":"e2e-shared-a-d24283","userId":"1fc46efb-e517-4e84-983e-e58810b5a540","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-4366e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ada90bc2-53ae-46ef-b951-020761680aae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4366e8"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","selected_subscription":"e2e-rate-iso-a-4366e8","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-4366e8@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada90bc2-53ae-46ef-b951-020761680aae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada90bc2-53ae-46ef-b951-020761680aae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49992","PortSpecifier":{"PortValue":49992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","method":"POST","path":"/ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d/v1/completions","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49992","PortSpecifier":{"PortValue":49992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746863,"nanos":338604580},"http":{"id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uC9GS8OnID33Qad9_ZFMeMTVeFOv2jQHr9OcKLlg8uSudfyrYQrtJWVlSh9y"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uC9GS8OnID33Qad9_ZFMeMTVeFOv2jQHr9OcKLlg8uSudfyrYQrtJWVlSh9y\"}"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af43016a-d08f-4b87-968a-4343daa1ead2","keyName":"e2e-rate-b-4366e8","subscription":"e2e-rate-iso-b-4366e8","tenant":"e2e-shared-b-63c82d","userId":"af43016a-d08f-4b87-968a-4343daa1ead2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d\",\"requestedSubscription\":\"e2e-rate-iso-b-4366e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-63c82d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4366e8","namespace":"ai-tenant-e2e-shared-b-63c82d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d"}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4366e8"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af43016a-d08f-4b87-968a-4343daa1ead2","keyName":"e2e-rate-b-4366e8","selected_subscription":"e2e-rate-iso-b-4366e8","selected_subscription_key":"ai-tenant-e2e-shared-b-63c82d/e2e-rate-iso-b-4366e8@ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-63c82d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4366e8","namespace":"ai-tenant-e2e-shared-b-63c82d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T19:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885"}
{"level":"info","ts":"2026-07-22T19:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e"}
{"level":"info","ts":"2026-07-22T19:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"}
{"level":"info","ts":"2026-07-22T19:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f"}
{"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72"}