{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35788","PortSpecifier":{"PortValue":35788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848018,"nanos":831218487},"http":{"id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54862","PortSpecifier":{"PortValue":54862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"faf3ed8e-c376-9ece-8960-ca6059de7747","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54862","PortSpecifier":{"PortValue":54862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848018,"nanos":872270838},"http":{"id":"faf3ed8e-c376-9ece-8960-ca6059de7747","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/rate-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35802","PortSpecifier":{"PortValue":35802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"593a188d-e61c-40e4-8e9c-a25108c906a3","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35802","PortSpecifier":{"PortValue":35802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848018,"nanos":912735781},"http":{"id":"593a188d-e61c-40e4-8e9c-a25108c906a3","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7\"}"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","subscription":"e2e-rate-iso-a-2ca1d6","tenant":"e2e-shared-a-fd1be5","userId":"014fb81b-1cba-4b21-9825-224a2e621f69","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-2ca1d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2ca1d6"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","selected_subscription":"e2e-rate-iso-a-2ca1d6","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-2ca1d6@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35806","PortSpecifier":{"PortValue":35806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66f0e818-6629-415c-be5c-ad13d0e76391","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35806","PortSpecifier":{"PortValue":35806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848019,"nanos":994340137},"http":{"id":"66f0e818-6629-415c-be5c-ad13d0e76391","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7"}
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7\"}"}
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","subscription":"e2e-rate-iso-a-2ca1d6","tenant":"e2e-shared-a-fd1be5","userId":"014fb81b-1cba-4b21-9825-224a2e621f69","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-2ca1d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2ca1d6"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","selected_subscription":"e2e-rate-iso-a-2ca1d6","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-2ca1d6@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"773821f1-9e66-4171-9443-6000a37cf5da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"773821f1-9e66-4171-9443-6000a37cf5da","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"773821f1-9e66-4171-9443-6000a37cf5da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848021,"nanos":32002444},"http":{"id":"773821f1-9e66-4171-9443-6000a37cf5da","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7\"}"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","subscription":"e2e-rate-iso-a-2ca1d6","tenant":"e2e-shared-a-fd1be5","userId":"014fb81b-1cba-4b21-9825-224a2e621f69","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-2ca1d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"773821f1-9e66-4171-9443-6000a37cf5da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2ca1d6"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","selected_subscription":"e2e-rate-iso-a-2ca1d6","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-2ca1d6@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"773821f1-9e66-4171-9443-6000a37cf5da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"773821f1-9e66-4171-9443-6000a37cf5da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38876","PortSpecifier":{"PortValue":38876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38876","PortSpecifier":{"PortValue":38876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848034,"nanos":27443108},"http":{"id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58974","PortSpecifier":{"PortValue":58974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58974","PortSpecifier":{"PortValue":58974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848034,"nanos":71554165},"http":{"id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/rate-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38892","PortSpecifier":{"PortValue":38892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38892","PortSpecifier":{"PortValue":38892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848034,"nanos":109179492},"http":{"id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa\"}"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","subscription":"e2e-rate-iso-a-e7d40b","tenant":"e2e-shared-a-fd1be5","userId":"148b1318-320f-430b-a06e-1c5403901ef3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-e7d40b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e7d40b"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","selected_subscription":"e2e-rate-iso-a-e7d40b","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-e7d40b@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54320","PortSpecifier":{"PortValue":54320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec9917f1-a8db-4428-8d93-7abd626c7781","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54320","PortSpecifier":{"PortValue":54320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848035,"nanos":181645436},"http":{"id":"ec9917f1-a8db-4428-8d93-7abd626c7781","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa\"}"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","subscription":"e2e-rate-iso-a-e7d40b","tenant":"e2e-shared-a-fd1be5","userId":"148b1318-320f-430b-a06e-1c5403901ef3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-e7d40b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e7d40b"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","selected_subscription":"e2e-rate-iso-a-e7d40b","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-e7d40b@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de83973e-f427-40fc-b8b1-9d07df674861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54336","PortSpecifier":{"PortValue":54336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de83973e-f427-40fc-b8b1-9d07df674861","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de83973e-f427-40fc-b8b1-9d07df674861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54336","PortSpecifier":{"PortValue":54336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848036,"nanos":219325439},"http":{"id":"de83973e-f427-40fc-b8b1-9d07df674861","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa\"}"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","subscription":"e2e-rate-iso-a-e7d40b","tenant":"e2e-shared-a-fd1be5","userId":"148b1318-320f-430b-a06e-1c5403901ef3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-e7d40b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de83973e-f427-40fc-b8b1-9d07df674861","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e7d40b"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","selected_subscription":"e2e-rate-iso-a-e7d40b","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-e7d40b@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de83973e-f427-40fc-b8b1-9d07df674861","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de83973e-f427-40fc-b8b1-9d07df674861","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60974","PortSpecifier":{"PortValue":60974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","method":"POST","path":"/ai-tenant-e2e-shared-b-159535/rate-test-model-159535/v1/completions","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60974","PortSpecifier":{"PortValue":60974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848036,"nanos":256543138},"http":{"id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-159535/rate-test-model-159535/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-i0Bycmh5IPxmJm0a_af5M8tscq1ldDh343M676HS6kh8oWRbQQKLZYFureJ0"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-i0Bycmh5IPxmJm0a_af5M8tscq1ldDh343M676HS6kh8oWRbQQKLZYFureJ0\"}"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a991655-7e56-4494-a0be-604b46d3b454","keyName":"e2e-rate-b-e7d40b","subscription":"e2e-rate-iso-b-e7d40b","tenant":"e2e-shared-b-159535","userId":"4a991655-7e56-4494-a0be-604b46d3b454","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-159535/rate-test-model-159535\",\"requestedSubscription\":\"e2e-rate-iso-b-e7d40b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-159535","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e7d40b","namespace":"ai-tenant-e2e-shared-b-159535","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-159535/rate-test-model-159535"}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/rate-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e7d40b"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a991655-7e56-4494-a0be-604b46d3b454","keyName":"e2e-rate-b-e7d40b","selected_subscription":"e2e-rate-iso-b-e7d40b","selected_subscription_key":"ai-tenant-e2e-shared-b-159535/e2e-rate-iso-b-e7d40b@ai-tenant-e2e-shared-b-159535/rate-test-model-159535","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-159535","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e7d40b","namespace":"ai-tenant-e2e-shared-b-159535","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-159535/rate-test-model-159535"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0abfaea14e71ca89a57d11e9aa8df335d31747de25ec4ca0c30ad8cfe21a3058"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a46c54993dfd258c143b9af88302af42267c332052e9ef6dacd037f4edbb70e"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09fbc3b032e0f9b9fcefd96e2b49f229a656330dc4b3a18550d785ed0916857f"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b1fcca0bedce3a87aca4841ab429eb2b19ff565f2311750ea055faf6a78474"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c8a6190dfbb2f23d78b3cd2b198cee910c2e04d9470c54ce310c6fdaab13004"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25bf2f178592efc85702cc39d15fb70a4f71865e8b079390846f7f33bf3b99eb"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177"}
{"level":"info","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42960","PortSpecifier":{"PortValue":42960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42960","PortSpecifier":{"PortValue":42960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848103,"nanos":205141515},"http":{"id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","method":"POST","headers":{":authority":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a578b66-3c28-40c5-881e-d11578104a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42962","PortSpecifier":{"PortValue":42962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a578b66-3c28-40c5-881e-d11578104a82","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a578b66-3c28-40c5-881e-d11578104a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42962","PortSpecifier":{"PortValue":42962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848103,"nanos":257109678},"http":{"id":"3a578b66-3c28-40c5-881e-d11578104a82","method":"POST","headers":{":authority":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1pg1MOtLBEkACx9o_JIqukyl09JiybEdqZvlzGkifEdR3ueNsP2XD2egJ144"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1pg1MOtLBEkACx9o_JIqukyl09JiybEdqZvlzGkifEdR3ueNsP2XD2egJ144\"}"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a3ce00a1-03fa-4218-8540-31cb4227ad2b","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"a3ce00a1-03fa-4218-8540-31cb4227ad2b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a578b66-3c28-40c5-881e-d11578104a82","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a3ce00a1-03fa-4218-8540-31cb4227ad2b","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a578b66-3c28-40c5-881e-d11578104a82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a578b66-3c28-40c5-881e-d11578104a82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"info","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"error","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55614","PortSpecifier":{"PortValue":55614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55614","PortSpecifier":{"PortValue":55614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848145,"nanos":200407500},"http":{"id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","method":"POST","headers":{":authority":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4b3ef9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55630","PortSpecifier":{"PortValue":55630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","method":"POST","path":"/ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9/v1/chat/completions","host":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55630","PortSpecifier":{"PortValue":55630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848147,"nanos":264462056},"http":{"id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","method":"POST","headers":{":authority":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UBks05pZlIhcZL9E_dChdJYDUuWV6MHhpTxSPQDewpZj8dJDAoTe9GlRTkgi"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-4b3ef9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UBks05pZlIhcZL9E_dChdJYDUuWV6MHhpTxSPQDewpZj8dJDAoTe9GlRTkgi\"}"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4b3ef9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5808985a-80f8-498a-b3eb-2e1b258c5010","keyName":"e2e-ipp-4b3ef9","subscription":"ipp-route-4b3ef9-sub","tenant":"e2e-ipp-a-4b3ef9","userId":"5808985a-80f8-498a-b3eb-2e1b258c5010","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-4b3ef9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9\",\"requestedSubscription\":\"ipp-route-4b3ef9-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4b3ef9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-4b3ef9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4b3ef9-sub","namespace":"ai-tenant-e2e-ipp-a-4b3ef9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9"}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4b3ef9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-4b3ef9-sub"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5808985a-80f8-498a-b3eb-2e1b258c5010","keyName":"e2e-ipp-4b3ef9","selected_subscription":"ipp-route-4b3ef9-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9-sub@ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-4b3ef9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4b3ef9-sub","namespace":"ai-tenant-e2e-ipp-a-4b3ef9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"}
{"level":"info","ts":"2026-07-23T23:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}