{"level":"info","ts":"2026-07-23T18:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"}
{"level":"info","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55924","PortSpecifier":{"PortValue":55924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55924","PortSpecifier":{"PortValue":55924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832558,"nanos":444529381},"http":{"id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}}
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fafac731-1b4e-4eb1-b3d5-dacc2af1f060","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"error","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"}
{"level":"error","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"}
{"level":"info","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:49:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:49:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"}
{"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55938","PortSpecifier":{"PortValue":55938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea40809a-de7e-4fb9-87ee-aa727537953b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55938","PortSpecifier":{"PortValue":55938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832567,"nanos":462862579},"http":{"id":"ea40809a-de7e-4fb9-87ee-aa727537953b","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea40809a-de7e-4fb9-87ee-aa727537953b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59614","PortSpecifier":{"PortValue":59614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59614","PortSpecifier":{"PortValue":59614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832567,"nanos":511626097},"http":{"id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"]}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5bb4241354c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc9d5902-174b-4bd2-9283-3a1bd1bfc72b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6b87e3bf-20f2-4c7e-a332-83c316864dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"532371c1-87b3-48cb-bae2-d6ca33cd257e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46cd8446-645f-4e57-adae-12c4753781be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55954","PortSpecifier":{"PortValue":55954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46cd8446-645f-4e57-adae-12c4753781be","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46cd8446-645f-4e57-adae-12c4753781be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55954","PortSpecifier":{"PortValue":55954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832567,"nanos":557732507},"http":{"id":"46cd8446-645f-4e57-adae-12c4753781be","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46cd8446-645f-4e57-adae-12c4753781be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46cd8446-645f-4e57-adae-12c4753781be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46cd8446-645f-4e57-adae-12c4753781be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46cd8446-645f-4e57-adae-12c4753781be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35130","PortSpecifier":{"PortValue":35130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35130","PortSpecifier":{"PortValue":35130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832568,"nanos":618509053},"http":{"id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89af96ed-cf24-4f99-aaf8-2d61bcaafb38","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffad6ca3-8787-487a-90e4-98c262672324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35136","PortSpecifier":{"PortValue":35136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffad6ca3-8787-487a-90e4-98c262672324","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffad6ca3-8787-487a-90e4-98c262672324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35136","PortSpecifier":{"PortValue":35136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832569,"nanos":659318765},"http":{"id":"ffad6ca3-8787-487a-90e4-98c262672324","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffad6ca3-8787-487a-90e4-98c262672324","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffad6ca3-8787-487a-90e4-98c262672324","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffad6ca3-8787-487a-90e4-98c262672324","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffad6ca3-8787-487a-90e4-98c262672324","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35142","PortSpecifier":{"PortValue":35142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35142","PortSpecifier":{"PortValue":35142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832570,"nanos":693913743},"http":{"id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb615f27-6ef5-47b7-8ae9-cd39a41314e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35148","PortSpecifier":{"PortValue":35148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35148","PortSpecifier":{"PortValue":35148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832571,"nanos":732672593},"http":{"id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58fc8e18-c607-4b5c-a02c-d2b3d7c1700b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35158","PortSpecifier":{"PortValue":35158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35158","PortSpecifier":{"PortValue":35158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832572,"nanos":773672398},"http":{"id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58ab1ace-b2a0-4c48-8003-c9629c558d81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35172","PortSpecifier":{"PortValue":35172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35172","PortSpecifier":{"PortValue":35172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832573,"nanos":814555425},"http":{"id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f441dbc7-7bca-44e8-b0b5-04a361e217e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35184","PortSpecifier":{"PortValue":35184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4d3e955-4341-442b-8538-562b4ea224e5","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35184","PortSpecifier":{"PortValue":35184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832574,"nanos":849668623},"http":{"id":"f4d3e955-4341-442b-8538-562b4ea224e5","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4d3e955-4341-442b-8538-562b4ea224e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35194","PortSpecifier":{"PortValue":35194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35194","PortSpecifier":{"PortValue":35194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832575,"nanos":884326267},"http":{"id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1f089a0-0c0e-40aa-95ea-5795c01a9df8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35210","PortSpecifier":{"PortValue":35210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35210","PortSpecifier":{"PortValue":35210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832576,"nanos":920918600},"http":{"id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86babff1-6483-4de7-a7cf-ed98b5b9434c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40702","PortSpecifier":{"PortValue":40702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26daccb2-59c4-4bee-b206-61e2eec6b317","method":"POST","path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions","host":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40702","PortSpecifier":{"PortValue":40702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832577,"nanos":959990523},"http":{"id":"26daccb2-59c4-4bee-b206-61e2eec6b317","method":"POST","headers":{":authority":"e2e-shared-a-d87a73.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS"}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yUTyy4Zo6Des8Xcq_RvkzV73zzuW3VSSN2bWdbkKzgSGLRmv9lFnm2sxKYTS\"}"}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","subscription":"e2e-rate-iso-a-79b291","tenant":"e2e-shared-a-d87a73","userId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\",\"requestedSubscription\":\"e2e-rate-iso-a-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d87a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"}}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d87a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9db4a1ef-7f90-44d8-8b08-bc6cc1c6bf17","keyName":"e2e-rate-a-79b291","selected_subscription":"e2e-rate-iso-a-79b291","selected_subscription_key":"ai-tenant-e2e-shared-a-d87a73/e2e-rate-iso-a-79b291@ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d87a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-79b291","namespace":"ai-tenant-e2e-shared-a-d87a73","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d87a73/rate-test-model-d87a73"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26daccb2-59c4-4bee-b206-61e2eec6b317","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44218","PortSpecifier":{"PortValue":44218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","method":"POST","path":"/ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c/v1/completions","host":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44218","PortSpecifier":{"PortValue":44218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832578,"nanos":1968207},"http":{"id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","method":"POST","headers":{":authority":"e2e-shared-b-118a8c.apps.1d9f2e48-f8b6-4346-aad7-c5bb4241354c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JPklWkrIFgVk6MYg_LoR5mLondmqppuOhrVpDr014HYvqZ32NN1UlW2sX6U0"}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JPklWkrIFgVk6MYg_LoR5mLondmqppuOhrVpDr014HYvqZ32NN1UlW2sX6U0\"}"}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9b1108df-3e2c-47cb-918d-d907cf6a63f9","keyName":"e2e-rate-b-79b291","subscription":"e2e-rate-iso-b-79b291","tenant":"e2e-shared-b-118a8c","userId":"9b1108df-3e2c-47cb-918d-d907cf6a63f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c\",\"requestedSubscription\":\"e2e-rate-iso-b-79b291\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-118a8c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-118a8c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-79b291","namespace":"ai-tenant-e2e-shared-b-118a8c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c"}}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-118a8c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-79b291"}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9b1108df-3e2c-47cb-918d-d907cf6a63f9","keyName":"e2e-rate-b-79b291","selected_subscription":"e2e-rate-iso-b-79b291","selected_subscription_key":"ai-tenant-e2e-shared-b-118a8c/e2e-rate-iso-b-79b291@ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-118a8c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-79b291","namespace":"ai-tenant-e2e-shared-b-118a8c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-118a8c/rate-test-model-118a8c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f8038f7-6732-445e-a6d6-2985d88fb24c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb210c05760738f747fe9a019b60e5e63112fe2ad582e38c6ff83134bf1140b3"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3135443d1f7420956e6a556d3028ade9bac4a81e0824e04f712482f51d8282be"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a144b763040865d65ce0467b57d19ba5f5ad8d0ba3d7c6cf37c4600c73c5c5bc"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d88e5dc7944af2decc2a5c026296bd33e8cbc97552018dfae6e0c30ceb6a0344"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40c4391a54b4b8f81feaef7f374d012c9a9dcec5945f0978795aa2bea877d20"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b86d2441c2ceb82796b78df5e9b965e1d8d439bad7bb4b315d53d0e1741e5bc9"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f08cffa9874fe02ed357e7eb65d8e9b7a1401abe31ac5980478c50a5d83f34cf"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beebadc497e79da8e62c058ece814d7602fffe659870b131e20674b550b58b9e"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d198e61b3a91342f5f7d85237f11139f91de5a33c97fe68aa11d44740d596c30"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ad1d1ebe63011f404daf71ee2064346a7f9156f152b9d81c6d297f1caded46"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf7efbb1de702032964758925416a79752a9c43c9dca3feb65d39bdd2919c62"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06ad1df5cce48059c5bbf998747044ca7fac5736cd12589ebba7f7c3e1bf0ffd"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40cb30347fe95bbb610f630e6b0285d08c75c659f6c7dce1b1de400c1ce373d0"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de651d4162189351de85c37b234df269eef8dc02b1aa8c9b6dba5e81f80be1a"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d48e0f91d92d08ed63e5beed9694d07b4d6788e2df67c6103d10452abd57e31d"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afebfb1aba24aa31aee5ff1613b56cd9f16beee9924b953af90c6085146a25f1"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a12f9b8be3f2521bfb6c86c9becdf0f67248348b966c4406f65e9c654911d5d"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76472eae5458f737d8646d95c1757310396b36e066f0bc36e35ea92dcf998e04"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb71ba244183f72055cb759fb83a4d4fc001c9d68fab73052827dc3a328a4364"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3091166a457734931887953aefcb2a023fb4016c0551a968542189012ce2eba"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95a6a83430ae4a69259a1c2e0589b493c52c032161ae3d2fa26846b0630bace0"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b27ee9015045b27492e835df217dcd48e98fe452967b6eb3370d28cb2e00fd3b"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea11449df8e1f49f46f18451fe23468c9177288e383b5c5f4ff601c0ce525cbb"}
{"level":"info","ts":"2026-07-23T18:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35cacbe9801621fed42acd24bff375ff83276295601736a9b9cfd49ac8291fdb"}