--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5773ad7957b6715d83a880c331b474acd0f9b2361e3cee5ae09fae435ffaba61"}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5773ad7957b6715d83a880c331b474acd0f9b2361e3cee5ae09fae435ffaba61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:29:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:29:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47"}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:29:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:29:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5773ad7957b6715d83a880c331b474acd0f9b2361e3cee5ae09fae435ffaba61"}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47"}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5773ad7957b6715d83a880c331b474acd0f9b2361e3cee5ae09fae435ffaba61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:29:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:29:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5773ad7957b6715d83a880c331b474acd0f9b2361e3cee5ae09fae435ffaba61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5773ad7957b6715d83a880c331b474acd0f9b2361e3cee5ae09fae435ffaba61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:29:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:29:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5773ad7957b6715d83a880c331b474acd0f9b2361e3cee5ae09fae435ffaba61"}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5773ad7957b6715d83a880c331b474acd0f9b2361e3cee5ae09fae435ffaba61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47"}
{"level":"info","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58122","PortSpecifier":{"PortValue":58122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58122","PortSpecifier":{"PortValue":58122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744160,"nanos":722305816},"http":{"id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e29af6f0-85ed-4905-b264-d4d3c5df3449","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60802","PortSpecifier":{"PortValue":60802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60802","PortSpecifier":{"PortValue":60802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744160,"nanos":797503731},"http":{"id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e216fc6-6196-4475-9bc6-3ef0e86c3800","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58124","PortSpecifier":{"PortValue":58124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"943ce130-0293-4186-8f14-9cdb6bae982b","method":"GET","path":"/maas-api/v1/api-keys/937264f9-7314-4b61-8c00-edfd83b3ff85","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58124","PortSpecifier":{"PortValue":58124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744160,"nanos":861615490},"http":{"id":"943ce130-0293-4186-8f14-9cdb6bae982b","method":"GET","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/937264f9-7314-4b61-8c00-edfd83b3ff85",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/937264f9-7314-4b61-8c00-edfd83b3ff85",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"943ce130-0293-4186-8f14-9cdb6bae982b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60812","PortSpecifier":{"PortValue":60812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","method":"GET","path":"/maas-api/v1/api-keys/6e985321-80af-4932-a3e3-8e636597d901","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60812","PortSpecifier":{"PortValue":60812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744160,"nanos":909068238},"http":{"id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","method":"GET","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e985321-80af-4932-a3e3-8e636597d901",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e985321-80af-4932-a3e3-8e636597d901",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7c7646c-eab1-4134-b9dd-f7e94c2fbf79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12b79d56-77d4-4930-8837-b711410cdab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54368","PortSpecifier":{"PortValue":54368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12b79d56-77d4-4930-8837-b711410cdab0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12b79d56-77d4-4930-8837-b711410cdab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54368","PortSpecifier":{"PortValue":54368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744175,"nanos":838123531},"http":{"id":"12b79d56-77d4-4930-8837-b711410cdab0","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12b79d56-77d4-4930-8837-b711410cdab0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12b79d56-77d4-4930-8837-b711410cdab0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12b79d56-77d4-4930-8837-b711410cdab0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12b79d56-77d4-4930-8837-b711410cdab0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12b79d56-77d4-4930-8837-b711410cdab0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"12b79d56-77d4-4930-8837-b711410cdab0","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12b79d56-77d4-4930-8837-b711410cdab0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12b79d56-77d4-4930-8837-b711410cdab0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12b79d56-77d4-4930-8837-b711410cdab0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12b79d56-77d4-4930-8837-b711410cdab0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12b79d56-77d4-4930-8837-b711410cdab0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12b79d56-77d4-4930-8837-b711410cdab0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44764","PortSpecifier":{"PortValue":44764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ffda151-e517-4b03-aae9-354054f20cf3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44764","PortSpecifier":{"PortValue":44764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744175,"nanos":872632350},"http":{"id":"8ffda151-e517-4b03-aae9-354054f20cf3","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ffda151-e517-4b03-aae9-354054f20cf3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74e63375-bf34-4348-9c94-e30876942932","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54382","PortSpecifier":{"PortValue":54382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74e63375-bf34-4348-9c94-e30876942932","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74e63375-bf34-4348-9c94-e30876942932","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54382","PortSpecifier":{"PortValue":54382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744175,"nanos":910807134},"http":{"id":"74e63375-bf34-4348-9c94-e30876942932","method":"GET","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74e63375-bf34-4348-9c94-e30876942932","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OEs9VVeBVX4A7Atd_LyhPiQkO32c61EtkSW5ZZLewyIiQhHjTN452i70GQoT"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74e63375-bf34-4348-9c94-e30876942932","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OEs9VVeBVX4A7Atd_LyhPiQkO32c61EtkSW5ZZLewyIiQhHjTN452i70GQoT\"}"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74e63375-bf34-4348-9c94-e30876942932","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"28e18b50-1120-4f71-b4ec-2f2b9dbeb0c0","keyName":"e2e-auth-iso-a-0c3211","subscription":"e2e-auth-iso-c615f0","tenant":"e2e-shared-a-3055d9","userId":"28e18b50-1120-4f71-b4ec-2f2b9dbeb0c0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74e63375-bf34-4348-9c94-e30876942932","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74e63375-bf34-4348-9c94-e30876942932","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74e63375-bf34-4348-9c94-e30876942932","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"74e63375-bf34-4348-9c94-e30876942932","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74e63375-bf34-4348-9c94-e30876942932","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74e63375-bf34-4348-9c94-e30876942932","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c615f0"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74e63375-bf34-4348-9c94-e30876942932","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74e63375-bf34-4348-9c94-e30876942932","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74e63375-bf34-4348-9c94-e30876942932","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74e63375-bf34-4348-9c94-e30876942932","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74e63375-bf34-4348-9c94-e30876942932","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54920","PortSpecifier":{"PortValue":54920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46772175-61c5-4648-9ff0-8098e86a0d62","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54920","PortSpecifier":{"PortValue":54920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744190,"nanos":867077931},"http":{"id":"46772175-61c5-4648-9ff0-8098e86a0d62","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46772175-61c5-4648-9ff0-8098e86a0d62","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56322","PortSpecifier":{"PortValue":56322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56322","PortSpecifier":{"PortValue":56322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744190,"nanos":898949499},"http":{"id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebdc48d4-7f54-4cdd-816f-67d3f035c400","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdfb291e-2694-4631-9679-be18f99e542f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56326","PortSpecifier":{"PortValue":56326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdfb291e-2694-4631-9679-be18f99e542f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdfb291e-2694-4631-9679-be18f99e542f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56326","PortSpecifier":{"PortValue":56326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744190,"nanos":937305287},"http":{"id":"bdfb291e-2694-4631-9679-be18f99e542f","method":"GET","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdfb291e-2694-4631-9679-be18f99e542f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SVcyeuWfyaflmGbo_v0EUJO1yOaCwubQdoAw6dYNSnw8Hb5MVa5z2l6NLv5h"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdfb291e-2694-4631-9679-be18f99e542f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SVcyeuWfyaflmGbo_v0EUJO1yOaCwubQdoAw6dYNSnw8Hb5MVa5z2l6NLv5h\"}"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdfb291e-2694-4631-9679-be18f99e542f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdfb291e-2694-4631-9679-be18f99e542f","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdfb291e-2694-4631-9679-be18f99e542f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdfb291e-2694-4631-9679-be18f99e542f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"bdfb291e-2694-4631-9679-be18f99e542f","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdfb291e-2694-4631-9679-be18f99e542f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdfb291e-2694-4631-9679-be18f99e542f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdfb291e-2694-4631-9679-be18f99e542f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":null}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdfb291e-2694-4631-9679-be18f99e542f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"}
{"level":"info","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdfb291e-2694-4631-9679-be18f99e542f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:29:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdfb291e-2694-4631-9679-be18f99e542f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48894","PortSpecifier":{"PortValue":48894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79122d54-cc58-402f-862f-6e9d6d1e446e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48894","PortSpecifier":{"PortValue":48894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744208,"nanos":105773550},"http":{"id":"79122d54-cc58-402f-862f-6e9d6d1e446e","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79122d54-cc58-402f-862f-6e9d6d1e446e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40882","PortSpecifier":{"PortValue":40882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40882","PortSpecifier":{"PortValue":40882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744208,"nanos":142005750},"http":{"id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"115a8c36-59c9-486a-9a4a-aa98a128aef2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8178554-93e8-41cb-9729-966222e909d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48896","PortSpecifier":{"PortValue":48896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8178554-93e8-41cb-9729-966222e909d1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8178554-93e8-41cb-9729-966222e909d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48896","PortSpecifier":{"PortValue":48896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744208,"nanos":179493589},"http":{"id":"b8178554-93e8-41cb-9729-966222e909d1","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8178554-93e8-41cb-9729-966222e909d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8178554-93e8-41cb-9729-966222e909d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8178554-93e8-41cb-9729-966222e909d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8178554-93e8-41cb-9729-966222e909d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8178554-93e8-41cb-9729-966222e909d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"b8178554-93e8-41cb-9729-966222e909d1","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8178554-93e8-41cb-9729-966222e909d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8178554-93e8-41cb-9729-966222e909d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8178554-93e8-41cb-9729-966222e909d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8178554-93e8-41cb-9729-966222e909d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8178554-93e8-41cb-9729-966222e909d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8178554-93e8-41cb-9729-966222e909d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40890","PortSpecifier":{"PortValue":40890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40890","PortSpecifier":{"PortValue":40890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744208,"nanos":215043483},"http":{"id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa66c307-26be-4df0-b47a-2a08a4c19e9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35458","PortSpecifier":{"PortValue":35458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63891bb1-8673-4f2f-818f-783f3ab3903c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35458","PortSpecifier":{"PortValue":35458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744230,"nanos":422792431},"http":{"id":"63891bb1-8673-4f2f-818f-783f3ab3903c","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63891bb1-8673-4f2f-818f-783f3ab3903c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48182","PortSpecifier":{"PortValue":48182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48182","PortSpecifier":{"PortValue":48182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744230,"nanos":458430585},"http":{"id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1bef6a5-a7d8-4df3-ab64-f7ddfdc2552f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48198","PortSpecifier":{"PortValue":48198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","method":"GET","path":"/maas-api/v1/api-keys/bbf965cd-4c8c-4129-b164-372920b47dd4","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48198","PortSpecifier":{"PortValue":48198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744230,"nanos":491439368},"http":{"id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","method":"GET","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbf965cd-4c8c-4129-b164-372920b47dd4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbf965cd-4c8c-4129-b164-372920b47dd4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00ea3717-a137-4ec4-bce6-4c36b33edd27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","method":"GET","path":"/maas-api/v1/api-keys/bbf965cd-4c8c-4129-b164-372920b47dd4","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744230,"nanos":524668119},"http":{"id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","method":"GET","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbf965cd-4c8c-4129-b164-372920b47dd4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbf965cd-4c8c-4129-b164-372920b47dd4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8ba4b25-d82f-409b-bf97-087c7aff63a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47272","PortSpecifier":{"PortValue":47272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47272","PortSpecifier":{"PortValue":47272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744249,"nanos":720364339},"http":{"id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e98ea2b-39e2-4cf1-b288-4326691eef71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35538","PortSpecifier":{"PortValue":35538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35538","PortSpecifier":{"PortValue":35538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744249,"nanos":756581087},"http":{"id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/auth-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7893338-7344-4ed6-bf6a-e04d54b1cb92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47276","PortSpecifier":{"PortValue":47276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47276","PortSpecifier":{"PortValue":47276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744249,"nanos":791564307},"http":{"id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CDxqJXJmaZntHgWf_ayUKchFBvzfsnUQYE2lmXusrnc3HFp6UaubqMfEvd8D"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CDxqJXJmaZntHgWf_ayUKchFBvzfsnUQYE2lmXusrnc3HFp6UaubqMfEvd8D\"}"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"798ac960-fd50-44bc-bff9-fae62d5eae24","keyName":"e2e-auth-iso-a-f1319b","subscription":"e2e-auth-iso-79ccd9","tenant":"e2e-shared-a-3055d9","userId":"798ac960-fd50-44bc-bff9-fae62d5eae24","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/auth-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-79ccd9"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:30:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01f38ba3-04c2-45f1-ad17-5d1e255e117f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a0f1d5c109b5ade736a1f6261ebae65e034d3a03b277c3a56d56c1220e8143c"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ebf9a254fa628f3665de9d8591a286145396cbab45b607c881030ba8325845e"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53251d8d10accf3463af6c77342392ecd0f23c18a766ca324df9068a213da1cd"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f38a01101774c67f9f17b8d092b03c7fdfaef71edf9d628dcc685c4320095bf"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4eaef615b7206cf50d84f0a070725304ea90ca8ce61ddc0666cc35dfceb35185"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ecfac7f227dd4c21ba2c1257102415cadbfc00324b1ec79361dc50041ccb3ca"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/486cb7857791259840fe2df5f124416d1280b892f462f6bd02f3a18356af8701"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20c4ce5cb75c5c2ddde5a8b40966299355413c7114af9301ea78d4ea21ba29d6"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/478b1bb774e450a0dcc1f8519a8f5bac41a970dcf5a3f078163e4ac3989acc62"}
{"level":"info","ts":"2026-07-11T04:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f34f6b94b9f5e76ddb95a7b74d0e395e5ea6c102b776f45e9433cbc562543974"}
{"level":"info","ts":"2026-07-11T04:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ac96c96bca93b716d881019e0e6f36d366f11bc977768e7962cbaa37789cbf6"}
{"level":"info","ts":"2026-07-11T04:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09ab2a7efa7300cc172beae2bc67c67b2d8ce921598c8f76496c2605a8f08c47"}
{"level":"info","ts":"2026-07-11T04:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5773ad7957b6715d83a880c331b474acd0f9b2361e3cee5ae09fae435ffaba61"}
{"level":"info","ts":"2026-07-11T04:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1123542c2342eedb1a8628e10eb3968a031585fe7214572a1ba428823764fe0"}
{"level":"info","ts":"2026-07-11T04:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf6950a84a9527a1b8382b50c6040ff41ac4adc00f3a2b15a74d590bdd6e4deb"}
{"level":"info","ts":"2026-07-11T04:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fb8012d073e8d0c8ebde3652ec8a902070b7ada9888b78e5f00e0bf0f73cbd8"}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"}
{"level":"debug","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"error","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f"}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"}
{"level":"info","ts":"2026-07-11T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"}
{"level":"error","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"debug","ts":"2026-07-11T04:32:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0"}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e"}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9817fe84076f4d510281346e6db29bf2b48e6eea0cdeed2c208ce998e3a0df80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9817fe84076f4d510281346e6db29bf2b48e6eea0cdeed2c208ce998e3a0df80"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f"}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1"}
{"level":"info","ts":"2026-07-11T04:32:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"info","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47470","PortSpecifier":{"PortValue":47470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47470","PortSpecifier":{"PortValue":47470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744341,"nanos":180202333},"http":{"id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/sub-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/sub-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47684834-6f69-4fc7-a56f-b4fcdf5b7afd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59962","PortSpecifier":{"PortValue":59962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59962","PortSpecifier":{"PortValue":59962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744341,"nanos":222222333},"http":{"id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/sub-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/sub-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caccd26e-ef4f-4e5a-b62a-b9c96a3749f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47482","PortSpecifier":{"PortValue":47482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47482","PortSpecifier":{"PortValue":47482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744341,"nanos":263577606},"http":{"id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","method":"GET","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XSMN6kIGaIVl7oBA_JgTGiSaBerx79BUBnfXVMhIgOasGPdpSwd5oFrj8ITS"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XSMN6kIGaIVl7oBA_JgTGiSaBerx79BUBnfXVMhIgOasGPdpSwd5oFrj8ITS\"}"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8e0dfa04-17a7-49ff-87bc-ed2b70c8a1ed","keyName":"e2e-sub-iso-9a5be6","subscription":"e2e-a-only-1b594f","tenant":"e2e-shared-a-3055d9","userId":"8e0dfa04-17a7-49ff-87bc-ed2b70c8a1ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/sub-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/sub-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-1b594f"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d75fd89b-5108-4fb5-a291-24e43dc95aed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59978","PortSpecifier":{"PortValue":59978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59978","PortSpecifier":{"PortValue":59978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744341,"nanos":328314120},"http":{"id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","method":"GET","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZFJF6F6cUFg4avNc_yCNd91O3oR5yFBAQhSYVwuQyEm53RqswJfAk8MAtz1L"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZFJF6F6cUFg4avNc_yCNd91O3oR5yFBAQhSYVwuQyEm53RqswJfAk8MAtz1L\"}"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e0bc781b-fc18-441d-8f32-0964db35f4d8","keyName":"e2e-sub-iso-2ac63c","subscription":"e2e-b-only-1b594f","tenant":"e2e-shared-b-eefca5","userId":"e0bc781b-fc18-441d-8f32-0964db35f4d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/sub-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/sub-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-1b594f"}
{"level":"info","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b29af71-cd47-46ef-b9fd-c4add30fd54d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53696","PortSpecifier":{"PortValue":53696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78a400ea-3fd1-49ca-a720-701f262ea647","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53696","PortSpecifier":{"PortValue":53696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744351,"nanos":526732918},"http":{"id":"78a400ea-3fd1-49ca-a720-701f262ea647","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/sub-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/sub-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78a400ea-3fd1-49ca-a720-701f262ea647","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47832","PortSpecifier":{"PortValue":47832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e4133db-1947-4ce0-bac2-49c07f264958","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47832","PortSpecifier":{"PortValue":47832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744351,"nanos":570212803},"http":{"id":"6e4133db-1947-4ce0-bac2-49c07f264958","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/sub-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/sub-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e4133db-1947-4ce0-bac2-49c07f264958","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53702","PortSpecifier":{"PortValue":53702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e75672e-74f3-4a07-a997-95af463a0ed1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53702","PortSpecifier":{"PortValue":53702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744351,"nanos":604786024},"http":{"id":"4e75672e-74f3-4a07-a997-95af463a0ed1","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ckr6IFt4DgqZmZbT_mCi9dy1eB1Zqx6lt4uepBnEJ5TUukctUA6bhcWgMLvS"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ckr6IFt4DgqZmZbT_mCi9dy1eB1Zqx6lt4uepBnEJ5TUukctUA6bhcWgMLvS\"}"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bdb1f32b-4582-498d-949f-234d728c24ac","keyName":"e2e-sub-iso-33f42b","subscription":"e2e-shared-sub-3e3219","tenant":"e2e-shared-a-3055d9","userId":"bdb1f32b-4582-498d-949f-234d728c24ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/sub-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/sub-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3e3219"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e75672e-74f3-4a07-a997-95af463a0ed1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47844","PortSpecifier":{"PortValue":47844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47844","PortSpecifier":{"PortValue":47844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744351,"nanos":641076454},"http":{"id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o5tsUBYbze6rFA8U_V7Q0bNKukAy6yCPXVChauY2U83MuIy8Qapbz8iZca0t"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o5tsUBYbze6rFA8U_V7Q0bNKukAy6yCPXVChauY2U83MuIy8Qapbz8iZca0t\"}"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"03dcbc42-53dc-4b3b-b3b7-e9fab9de24f9","keyName":"e2e-sub-iso-1995d0","subscription":"e2e-shared-sub-3e3219","tenant":"e2e-shared-b-eefca5","userId":"03dcbc42-53dc-4b3b-b3b7-e9fab9de24f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/sub-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/sub-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3e3219"}
{"level":"info","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:32:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adac7adb-81bc-447c-bdff-f6449a9c3f07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d728a2519b288845f0c4f4e0fd50ba7d0f29b326596f2784b0e680212eca7f7e"}
{"level":"info","ts":"2026-07-11T04:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd9a30a8c8fdaf547d5a25af52ca81d1a647410a2957d1f14089ed9a5db6724"}
{"level":"info","ts":"2026-07-11T04:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5518fab75bfe69d01449fdfee7e50067197c3893266bd3377764d085fdc4f0"}
{"level":"info","ts":"2026-07-11T04:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca29eea9b2c9bf7bec234a96638b09609b793c3e60495e60f5ec3a56daf11e4e"}
{"level":"info","ts":"2026-07-11T04:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6147d6b7976b5d5f91f238f06cefa88cc7f9f9226552351bcbc74cba438ccf2"}
{"level":"info","ts":"2026-07-11T04:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce9fd3f7baa62f28908f038086002467d449041246c92603230f7eaa6d6e87e1"}
{"level":"info","ts":"2026-07-11T04:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/272658c780a300dcbb1e55ee6add91df1ce9fdcef2130865aab02793fadabad3"}
{"level":"info","ts":"2026-07-11T04:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2163af0619fa009a5d67e2b1add1fc96a7e7ffca625093f3585a44654132ab52"}
{"level":"info","ts":"2026-07-11T04:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6831756a40e1e7e610ab9f683f7427acd5d6257de2bc7d454788205a01f92c0"}
{"level":"info","ts":"2026-07-11T04:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8607906377ab0cd9527b6028930d8f04fbd2f6549098c94f4e4243db931f8120"}
{"level":"info","ts":"2026-07-11T04:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29b59952ab3ebc5db9b7b6ab3ec55c432a9c16a7acf3e46b571c4e516d3fc781"}
{"level":"info","ts":"2026-07-11T04:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f53751b3d74a102a4b03a2fcdeb39b1494173e1f769d0e27f34830649c5f504"}
{"level":"info","ts":"2026-07-11T04:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9086a708c4aa124e4cb03e5e23b6c47979ef542ae1bdbcdebd1301f773e348a4"}
{"level":"info","ts":"2026-07-11T04:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b6235e0a319de81860f43c08757c7f2ff9a9d8db6c07b879017c9992d2070eb"}
{"level":"info","ts":"2026-07-11T04:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c72df40083d762a7b56054891f5bb2d53037aa392ac7cbc9cc62e4ad2c30991e"}
{"level":"info","ts":"2026-07-11T04:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4ba26672fcf2563818f4c143ac23c839e86a1573cd2e0fb8229ccee326b4c7f"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"}
{"level":"debug","ts":"2026-07-11T04:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07"}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:32:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6"}
{"level":"info","ts":"2026-07-11T04:32:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07"}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"debug","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6"}
{"level":"error","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"}
{"level":"error","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e"}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb"}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e"}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e"}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9817fe84076f4d510281346e6db29bf2b48e6eea0cdeed2c208ce998e3a0df80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9817fe84076f4d510281346e6db29bf2b48e6eea0cdeed2c208ce998e3a0df80"}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"error","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T04:33:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07"}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb"}
{"level":"info","ts":"2026-07-11T04:33:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"}
{"level":"info","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fb03739-96a7-4607-9660-e510581d65c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52578","PortSpecifier":{"PortValue":52578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fb03739-96a7-4607-9660-e510581d65c1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fb03739-96a7-4607-9660-e510581d65c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52578","PortSpecifier":{"PortValue":52578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744404,"nanos":819298709},"http":{"id":"8fb03739-96a7-4607-9660-e510581d65c1","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fb03739-96a7-4607-9660-e510581d65c1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fb03739-96a7-4607-9660-e510581d65c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fb03739-96a7-4607-9660-e510581d65c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb03739-96a7-4607-9660-e510581d65c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb03739-96a7-4607-9660-e510581d65c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"8fb03739-96a7-4607-9660-e510581d65c1","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb03739-96a7-4607-9660-e510581d65c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fb03739-96a7-4607-9660-e510581d65c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fb03739-96a7-4607-9660-e510581d65c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fb03739-96a7-4607-9660-e510581d65c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fb03739-96a7-4607-9660-e510581d65c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fb03739-96a7-4607-9660-e510581d65c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49028","PortSpecifier":{"PortValue":49028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49028","PortSpecifier":{"PortValue":49028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744404,"nanos":858722803},"http":{"id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc61f207-6e67-4833-bbcc-4c25b5fa3286","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52590","PortSpecifier":{"PortValue":52590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52590","PortSpecifier":{"PortValue":52590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744404,"nanos":900592782},"http":{"id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c8e7f3-4cdb-49be-8431-5fcb415ef0c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52598","PortSpecifier":{"PortValue":52598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52598","PortSpecifier":{"PortValue":52598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744405,"nanos":953016826},"http":{"id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e2e573-0688-4145-8b81-6098e5bb0ef9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52614","PortSpecifier":{"PortValue":52614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"701bd107-ea3f-46f0-8806-920262ae5dcd","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52614","PortSpecifier":{"PortValue":52614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744406,"nanos":988150048},"http":{"id":"701bd107-ea3f-46f0-8806-920262ae5dcd","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"701bd107-ea3f-46f0-8806-920262ae5dcd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52620","PortSpecifier":{"PortValue":52620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52620","PortSpecifier":{"PortValue":52620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744408,"nanos":28528107},"http":{"id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f7a4cee-e01a-4c6d-ad8a-23e60e4385f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52628","PortSpecifier":{"PortValue":52628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52628","PortSpecifier":{"PortValue":52628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744409,"nanos":71751150},"http":{"id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b63fcea-a10b-4da7-838a-5210a08f7ea8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49196","PortSpecifier":{"PortValue":49196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fc0403b-2913-41e9-9103-39c437cf497c","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49196","PortSpecifier":{"PortValue":49196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744410,"nanos":105885974},"http":{"id":"9fc0403b-2913-41e9-9103-39c437cf497c","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fc0403b-2913-41e9-9103-39c437cf497c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49210","PortSpecifier":{"PortValue":49210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49210","PortSpecifier":{"PortValue":49210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744411,"nanos":141991284},"http":{"id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cf4b569-61d0-46bc-b1f6-29dd20abe2d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49220","PortSpecifier":{"PortValue":49220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49220","PortSpecifier":{"PortValue":49220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744412,"nanos":182322898},"http":{"id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abaef5a8-03c9-95c6-adb2-cda520ed448d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49236","PortSpecifier":{"PortValue":49236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82fbb84e-4f79-4480-ae1d-f242c893c582","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49236","PortSpecifier":{"PortValue":49236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744413,"nanos":221173727},"http":{"id":"82fbb84e-4f79-4480-ae1d-f242c893c582","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82fbb84e-4f79-4480-ae1d-f242c893c582","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49238","PortSpecifier":{"PortValue":49238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49238","PortSpecifier":{"PortValue":49238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744414,"nanos":258426956},"http":{"id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7267d4d5-cf03-446a-849d-0cf1ae1a1699","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58b17372-4742-4fb2-a53c-b39242926b60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49242","PortSpecifier":{"PortValue":49242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58b17372-4742-4fb2-a53c-b39242926b60","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58b17372-4742-4fb2-a53c-b39242926b60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49242","PortSpecifier":{"PortValue":49242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744415,"nanos":295396848},"http":{"id":"58b17372-4742-4fb2-a53c-b39242926b60","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17idZFHkiJzSlTeFS_vkRRSXCgQ9kqFscZdKlMMF42uT2xjT8tWCZPNQwM67u\"}"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","subscription":"e2e-rate-iso-a-b6ee37","tenant":"e2e-shared-a-3055d9","userId":"6f5b9339-79ad-4a26-a665-67770ff35898","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-b6ee37\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58b17372-4742-4fb2-a53c-b39242926b60","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"58b17372-4742-4fb2-a53c-b39242926b60","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"58b17372-4742-4fb2-a53c-b39242926b60","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6ee37"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58b17372-4742-4fb2-a53c-b39242926b60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f5b9339-79ad-4a26-a665-67770ff35898","keyName":"e2e-rate-a-b6ee37","selected_subscription":"e2e-rate-iso-a-b6ee37","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-b6ee37@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6ee37","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58b17372-4742-4fb2-a53c-b39242926b60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58b17372-4742-4fb2-a53c-b39242926b60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39588","PortSpecifier":{"PortValue":39588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2230e315-a4ad-4def-a63e-b92899e684b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39588","PortSpecifier":{"PortValue":39588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744424,"nanos":396932},"http":{"id":"2230e315-a4ad-4def-a63e-b92899e684b8","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2230e315-a4ad-4def-a63e-b92899e684b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d83616b-a431-46d7-910b-b66066078c6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58084","PortSpecifier":{"PortValue":58084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d83616b-a431-46d7-910b-b66066078c6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d83616b-a431-46d7-910b-b66066078c6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58084","PortSpecifier":{"PortValue":58084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744424,"nanos":41353667},"http":{"id":"2d83616b-a431-46d7-910b-b66066078c6a","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d83616b-a431-46d7-910b-b66066078c6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d83616b-a431-46d7-910b-b66066078c6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1f5cefd-2981-40c6-b179-b5930462382d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"]}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d83616b-a431-46d7-910b-b66066078c6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/87ff76ea6eef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8beca4c3-3fc4-47e0-b105-a9abd12314f6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1f5cefd-2981-40c6-b179-b5930462382d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d83616b-a431-46d7-910b-b66066078c6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d83616b-a431-46d7-910b-b66066078c6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"2d83616b-a431-46d7-910b-b66066078c6a","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d83616b-a431-46d7-910b-b66066078c6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d83616b-a431-46d7-910b-b66066078c6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d83616b-a431-46d7-910b-b66066078c6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d83616b-a431-46d7-910b-b66066078c6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d83616b-a431-46d7-910b-b66066078c6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d83616b-a431-46d7-910b-b66066078c6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39590","PortSpecifier":{"PortValue":39590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39590","PortSpecifier":{"PortValue":39590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744424,"nanos":79990930},"http":{"id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"568f73b3-35d4-438b-8dc8-fbf78711fbbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39596","PortSpecifier":{"PortValue":39596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39596","PortSpecifier":{"PortValue":39596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744425,"nanos":113639892},"http":{"id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1bccf22-faec-476b-88c5-2a0b2a41a9da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39612","PortSpecifier":{"PortValue":39612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39612","PortSpecifier":{"PortValue":39612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744426,"nanos":154776398},"http":{"id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4feb8ada-b60b-4ba4-8019-57c8c757b0bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39622","PortSpecifier":{"PortValue":39622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39622","PortSpecifier":{"PortValue":39622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744427,"nanos":189369827},"http":{"id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"278d43ff-b4c4-4091-bd7b-9b9b3fac9c93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39626","PortSpecifier":{"PortValue":39626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1060c8a2-7350-4bf0-8f30-c171994465a8","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39626","PortSpecifier":{"PortValue":39626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744428,"nanos":227854793},"http":{"id":"1060c8a2-7350-4bf0-8f30-c171994465a8","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1060c8a2-7350-4bf0-8f30-c171994465a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39632","PortSpecifier":{"PortValue":39632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39632","PortSpecifier":{"PortValue":39632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744429,"nanos":265818403},"http":{"id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddd0f72e-83d5-4d36-84dd-c41aaebeda57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57502","PortSpecifier":{"PortValue":57502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be013234-3933-4962-a9d3-bfa9b316d7a1","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57502","PortSpecifier":{"PortValue":57502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744430,"nanos":300935702},"http":{"id":"be013234-3933-4962-a9d3-bfa9b316d7a1","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be013234-3933-4962-a9d3-bfa9b316d7a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57504","PortSpecifier":{"PortValue":57504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57504","PortSpecifier":{"PortValue":57504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744431,"nanos":337283619},"http":{"id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2afe75fa-3487-4e57-8027-eaaa347b55ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57516","PortSpecifier":{"PortValue":57516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57516","PortSpecifier":{"PortValue":57516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744432,"nanos":371505984},"http":{"id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99e404ae-1dc5-403b-9f02-9be36ec1c2e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57524","PortSpecifier":{"PortValue":57524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","method":"POST","path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions","host":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57524","PortSpecifier":{"PortValue":57524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744433,"nanos":407665016},"http":{"id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","method":"POST","headers":{":authority":"e2e-shared-a-3055d9.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bWCPm9n1bJcHPXFk_jgjmWkY0ybv58cdEmaODR6Xlwws8ugcuwOM2LIJYih9\"}"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","subscription":"e2e-rate-iso-a-3cdf57","tenant":"e2e-shared-a-3055d9","userId":"75d3996f-e078-487c-b322-4079eee02fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\",\"requestedSubscription\":\"e2e-rate-iso-a-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3055d9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-3055d9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75d3996f-e078-487c-b322-4079eee02fec","keyName":"e2e-rate-a-3cdf57","selected_subscription":"e2e-rate-iso-a-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-a-3055d9/e2e-rate-iso-a-3cdf57@ai-tenant-e2e-shared-a-3055d9/rate-test-model-3055d9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3055d9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cdf57","namespace":"ai-tenant-e2e-shared-a-3055d9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26b56d78-1b34-4f17-8f9c-0c9a91bd6011","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"369bac94-ce39-400a-a328-349e8a961570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60840","PortSpecifier":{"PortValue":60840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"369bac94-ce39-400a-a328-349e8a961570","method":"POST","path":"/ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5/v1/completions","host":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"369bac94-ce39-400a-a328-349e8a961570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60840","PortSpecifier":{"PortValue":60840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783744433,"nanos":444025367},"http":{"id":"369bac94-ce39-400a-a328-349e8a961570","method":"POST","headers":{":authority":"e2e-shared-b-eefca5.apps.d5cd2825-e7ab-4952-bcf4-87ff76ea6eef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Qv49dkBlwXpDS15z_NuwlfTs5xp9hYp3neRrvghJq1QkKmcp2SUOhjk98QrE"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"369bac94-ce39-400a-a328-349e8a961570","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Qv49dkBlwXpDS15z_NuwlfTs5xp9hYp3neRrvghJq1QkKmcp2SUOhjk98QrE\"}"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8e6aaeb-1453-4d41-a6cd-f47da31f6b04","keyName":"e2e-rate-b-3cdf57","subscription":"e2e-rate-iso-b-3cdf57","tenant":"e2e-shared-b-eefca5","userId":"e8e6aaeb-1453-4d41-a6cd-f47da31f6b04","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"369bac94-ce39-400a-a328-349e8a961570","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5\",\"requestedSubscription\":\"e2e-rate-iso-b-3cdf57\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"369bac94-ce39-400a-a328-349e8a961570","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 224, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eefca5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eefca5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3cdf57","namespace":"ai-tenant-e2e-shared-b-eefca5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"369bac94-ce39-400a-a328-349e8a961570","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"369bac94-ce39-400a-a328-349e8a961570","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-eefca5/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"369bac94-ce39-400a-a328-349e8a961570","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-3cdf57"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"369bac94-ce39-400a-a328-349e8a961570","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8e6aaeb-1453-4d41-a6cd-f47da31f6b04","keyName":"e2e-rate-b-3cdf57","selected_subscription":"e2e-rate-iso-b-3cdf57","selected_subscription_key":"ai-tenant-e2e-shared-b-eefca5/e2e-rate-iso-b-3cdf57@ai-tenant-e2e-shared-b-eefca5/rate-test-model-eefca5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eefca5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3cdf57","namespace":"ai-tenant-e2e-shared-b-eefca5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"369bac94-ce39-400a-a328-349e8a961570","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T04:33:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"369bac94-ce39-400a-a328-349e8a961570","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ec44c232cd4244a485073415932541548a5a60ab40f61079a9092a45b91c35e"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/270fc7ebe90309928895a5fa4e55f3d50997c7479ea66ac22f489e30c4a0bf6b"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d0e58cbccd7f5b2fb1b75f4bc77b764d813a92d9e57deb7e2cb3a589d528a3b"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a98a4bf3a44244b68db64970ee4e2cef139d624b69dcdeecbe09a3c90779687b"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/959addcba443c6e4dbf46fd69c5884523e86cf49744820895876d9ff6fc2a0d2"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79d172dee9a791005649dc6afa2d2d168a02b1840a94326994881221420a4f9d"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8c19b0553a468bc107880e421142f87d214f7ef282c7cef8a78d6e9e1031ceb"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/838f2e476e63218ec237536d62d2bb50716b11cdcc658980904992c7a96adc1b"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f090e609218625e03878289566695620ecf972a74d79ca6e5e950e1e5a601ca6"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2be1b18ff96fe7e9fb308ac850cb9608e7f657ee11978b9f0f25ff2b496bde4e"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba990cdd29ff7416154f190a77a22ec6d963d762814d747743faf7da99ee5bb3"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8a0bc48f5e4838b464fae934b8dec8ec6feb4cadea8c18b51da631b5996943b"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd3bcc91ac6ccf78e2701851155b000a8008b160d0b90e6f021581b914e25bb6"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4c780fb9acbd5e130ed6c5871e65d358d42eb95b346ebce1a992129a2389912"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/191090ab9fdb1a9adffc5a85f0859fccd80553586148d0858aa291030a3c1316"}
{"level":"info","ts":"2026-07-11T04:34:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2825fec5bbeb2da892a262e9cbd0ed2c9b24cdf8b3dc058fd48a20edbe3aaf07"}
{"level":"info","ts":"2026-07-11T04:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9817fe84076f4d510281346e6db29bf2b48e6eea0cdeed2c208ce998e3a0df80"}
{"level":"info","ts":"2026-07-11T04:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d475d146080b913d027ab247ddee918b52b9c4efdbd84d42edcba388b55d612"}
{"level":"info","ts":"2026-07-11T04:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e360888aa9d53033f060770534019e052fa58fac45f24a3b9516413822c993"}
{"level":"info","ts":"2026-07-11T04:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f886726bbdb7dc185d587a42f8d970d050b10ee0c4ec1ef2654e0ba0e73f400"}
{"level":"info","ts":"2026-07-11T04:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8457d2140061893f0e24ca3616093a429a6b97b8bda78af2160c70ca205ecef9"}
{"level":"info","ts":"2026-07-11T04:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9cdbed2ec1dca8284668768cc6b8196114a31c4863b2e50ef9effac96b68152"}
{"level":"info","ts":"2026-07-11T04:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8d8f542506c405fece3164d45241f02107ea1755b0d1cfc2610d4590864990f"}
{"level":"info","ts":"2026-07-11T04:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f188a03b6308b7b3d82260abe6030d27a8c88a02e724dd4327817f91a154be42"}