{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42278","PortSpecifier":{"PortValue":42278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284082,"nanos":459403868},"http":{"id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49414","PortSpecifier":{"PortValue":49414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49414","PortSpecifier":{"PortValue":49414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284082,"nanos":502805450},"http":{"id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49416","PortSpecifier":{"PortValue":49416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49416","PortSpecifier":{"PortValue":49416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284083,"nanos":539554419},"http":{"id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49426","PortSpecifier":{"PortValue":49426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49426","PortSpecifier":{"PortValue":49426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284084,"nanos":575264487},"http":{"id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49438","PortSpecifier":{"PortValue":49438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f71e95f-533f-4a85-96ca-3e269fed9737","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49438","PortSpecifier":{"PortValue":49438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284085,"nanos":619091898},"http":{"id":"5f71e95f-533f-4a85-96ca-3e269fed9737","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49444","PortSpecifier":{"PortValue":49444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49444","PortSpecifier":{"PortValue":49444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284086,"nanos":655982739},"http":{"id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49458","PortSpecifier":{"PortValue":49458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49458","PortSpecifier":{"PortValue":49458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284087,"nanos":698887345},"http":{"id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49712","PortSpecifier":{"PortValue":49712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"076a26ba-b918-4866-82ff-ea19992ecaf0","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49712","PortSpecifier":{"PortValue":49712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284088,"nanos":738599803},"http":{"id":"076a26ba-b918-4866-82ff-ea19992ecaf0","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"419bd722-817c-403b-908a-5b0fb0476583","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49720","PortSpecifier":{"PortValue":49720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"419bd722-817c-403b-908a-5b0fb0476583","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"419bd722-817c-403b-908a-5b0fb0476583","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49720","PortSpecifier":{"PortValue":49720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284089,"nanos":776129473},"http":{"id":"419bd722-817c-403b-908a-5b0fb0476583","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"419bd722-817c-403b-908a-5b0fb0476583","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"419bd722-817c-403b-908a-5b0fb0476583","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"419bd722-817c-403b-908a-5b0fb0476583","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd998183-a00d-455d-a504-6f77e5d94049","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48226","PortSpecifier":{"PortValue":48226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd998183-a00d-455d-a504-6f77e5d94049","method":"POST","path":"/ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130/v1/completions","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd998183-a00d-455d-a504-6f77e5d94049","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48226","PortSpecifier":{"PortValue":48226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284089,"nanos":807615804},"http":{"id":"fd998183-a00d-455d-a504-6f77e5d94049","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TQipdCQWoGqqPPeB_a3Eei96cn9uk4k9MsIOrUYPSkxvG7vLZzlPUwyI5biG"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TQipdCQWoGqqPPeB_a3Eei96cn9uk4k9MsIOrUYPSkxvG7vLZzlPUwyI5biG\"}"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ddcaff1-2b79-4aed-be21-5060a38248a0","keyName":"e2e-rate-b-043d08","subscription":"e2e-rate-iso-b-043d08","tenant":"e2e-shared-b-fa6130","userId":"6ddcaff1-2b79-4aed-be21-5060a38248a0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130\",\"requestedSubscription\":\"e2e-rate-iso-b-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m","name":"rate-test-model-fa6130","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-043d08","namespace":"ai-tenant-e2e-shared-b-fa6130","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130"}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd998183-a00d-455d-a504-6f77e5d94049","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-043d08"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ddcaff1-2b79-4aed-be21-5060a38248a0","keyName":"e2e-rate-b-043d08","selected_subscription":"e2e-rate-iso-b-043d08","selected_subscription_key":"ai-tenant-e2e-shared-b-fa6130/e2e-rate-iso-b-043d08@ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m","name":"rate-test-model-fa6130","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-043d08","namespace":"ai-tenant-e2e-shared-b-fa6130","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd998183-a00d-455d-a504-6f77e5d94049","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd998183-a00d-455d-a504-6f77e5d94049","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"}
{"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf"}
{"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd"}
{"level":"info","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52124","PortSpecifier":{"PortValue":52124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.21:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52124","PortSpecifier":{"PortValue":52124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.21:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284174,"nanos":36734008},"http":{"id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","method":"POST","headers":{":authority":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.21:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52132","PortSpecifier":{"PortValue":52132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.21:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52132","PortSpecifier":{"PortValue":52132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.21:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284174,"nanos":88029294},"http":{"id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","method":"POST","headers":{":authority":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-k1FYq8wgbJ2U1KoY_WFVGXHkQiTEVrBR2wmDWYHCaC2uqf5rrplDkvbkp7bu"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-k1FYq8wgbJ2U1KoY_WFVGXHkQiTEVrBR2wmDWYHCaC2uqf5rrplDkvbkp7bu\"}"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0fd9c14-a561-49ef-b368-17b2e9de028f","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"b0fd9c14-a561-49ef-b368-17b2e9de028f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.21:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0fd9c14-a561-49ef-b368-17b2e9de028f","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"error","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2"}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"}
{"level":"info","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57712","PortSpecifier":{"PortValue":57712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57712","PortSpecifier":{"PortValue":57712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284219,"nanos":2769471},"http":{"id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","method":"POST","headers":{":authority":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}}
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"ipp-route-f318ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-f318ab/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57728","PortSpecifier":{"PortValue":57728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","method":"POST","path":"/ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab/v1/chat/completions","host":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57728","PortSpecifier":{"PortValue":57728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284221,"nanos":62954852},"http":{"id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","method":"POST","headers":{":authority":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J3YFG91CsTnpaPhO_H6I6u1UMcj7UVDyApZZQ4icuwNR1VRbFSJGhBS0NWys"}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-f318ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J3YFG91CsTnpaPhO_H6I6u1UMcj7UVDyApZZQ4icuwNR1VRbFSJGhBS0NWys\"}"}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-f318ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d62c11a-9269-4dfd-a61e-c673f0b24cab","keyName":"e2e-ipp-f318ab","subscription":"ipp-route-f318ab-sub","tenant":"e2e-ipp-a-f318ab","userId":"7d62c11a-9269-4dfd-a61e-c673f0b24cab","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-f318ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab\",\"requestedSubscription\":\"ipp-route-f318ab-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-f318ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-f318ab/models/facebook/opt-125m","name":"ipp-route-f318ab","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-f318ab-sub","namespace":"ai-tenant-e2e-ipp-a-f318ab","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab"}}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"ipp-route-f318ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-f318ab/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-f318ab-sub"}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7d62c11a-9269-4dfd-a61e-c673f0b24cab","keyName":"e2e-ipp-f318ab","selected_subscription":"ipp-route-f318ab-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab-sub@ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-f318ab/models/facebook/opt-125m","name":"ipp-route-f318ab","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-f318ab-sub","namespace":"ai-tenant-e2e-ipp-a-f318ab","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T00:18:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b"}
{"level":"info","ts":"2026-07-29T00:18:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991"}
{"level":"info","ts":"2026-07-29T00:18:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"}
{"level":"info","ts":"2026-07-29T00:18:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"}
{"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2"}
{"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"}
{"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"}
{"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"}
{"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"}
{"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"}
{"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"}
{"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"}