{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc"}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T14:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"error","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T14:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39354","PortSpecifier":{"PortValue":39354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66abaecb-8189-46a6-8b3b-087508416ed9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39354","PortSpecifier":{"PortValue":39354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730731,"nanos":880434111},"http":{"id":"66abaecb-8189-46a6-8b3b-087508416ed9","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66abaecb-8189-46a6-8b3b-087508416ed9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59266","PortSpecifier":{"PortValue":59266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cba79695-a0d0-4f75-8408-a91463840ef4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59266","PortSpecifier":{"PortValue":59266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730731,"nanos":917385628},"http":{"id":"cba79695-a0d0-4f75-8408-a91463840ef4","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba79695-a0d0-4f75-8408-a91463840ef4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63081176-65c7-4cf4-9880-e3694044bd30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39358","PortSpecifier":{"PortValue":39358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63081176-65c7-4cf4-9880-e3694044bd30","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63081176-65c7-4cf4-9880-e3694044bd30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39358","PortSpecifier":{"PortValue":39358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730731,"nanos":955049846},"http":{"id":"63081176-65c7-4cf4-9880-e3694044bd30","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63081176-65c7-4cf4-9880-e3694044bd30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63081176-65c7-4cf4-9880-e3694044bd30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63081176-65c7-4cf4-9880-e3694044bd30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63081176-65c7-4cf4-9880-e3694044bd30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39374","PortSpecifier":{"PortValue":39374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae95270b-f6cd-4d50-8b75-62d212384696","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39374","PortSpecifier":{"PortValue":39374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730733,"nanos":14307262},"http":{"id":"ae95270b-f6cd-4d50-8b75-62d212384696","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae95270b-f6cd-4d50-8b75-62d212384696","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39386","PortSpecifier":{"PortValue":39386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39386","PortSpecifier":{"PortValue":39386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730734,"nanos":48779314},"http":{"id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9c4362b-e5dc-4718-b0a1-50aab83177dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39396","PortSpecifier":{"PortValue":39396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"272297fb-cbe9-47fb-b7af-987327b9509f","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39396","PortSpecifier":{"PortValue":39396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730735,"nanos":88668681},"http":{"id":"272297fb-cbe9-47fb-b7af-987327b9509f","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"272297fb-cbe9-47fb-b7af-987327b9509f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39410","PortSpecifier":{"PortValue":39410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39410","PortSpecifier":{"PortValue":39410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730736,"nanos":124508710},"http":{"id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2966a2-5130-4ffb-b1f1-9a2de1748c87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39416","PortSpecifier":{"PortValue":39416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39416","PortSpecifier":{"PortValue":39416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730737,"nanos":157285855},"http":{"id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d560e6-d80a-4d0c-aff6-0bada3f4e92e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730738,"nanos":202533657},"http":{"id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fXTXyvRtqanY2XdV_6e7eaaLp7nVeSA6WhLM8wgqLuxltWxzGWv2bd7dNf0i\"}"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","subscription":"e2e-rate-iso-a-b41a99","tenant":"e2e-shared-a-7d1f11","userId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-b41a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b41a99"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25e385ba-cfc9-4b5d-886d-7b68f504bd7d","keyName":"e2e-rate-a-b41a99","selected_subscription":"e2e-rate-iso-a-b41a99","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-b41a99@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b41a99","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e087bfa-5780-40ae-b730-e3d3ad9cf15d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d091a768-4d54-4229-9905-f39d063fba2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d091a768-4d54-4229-9905-f39d063fba2c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d091a768-4d54-4229-9905-f39d063fba2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730747,"nanos":39069817},"http":{"id":"d091a768-4d54-4229-9905-f39d063fba2c","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d091a768-4d54-4229-9905-f39d063fba2c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d091a768-4d54-4229-9905-f39d063fba2c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d091a768-4d54-4229-9905-f39d063fba2c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d091a768-4d54-4229-9905-f39d063fba2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d091a768-4d54-4229-9905-f39d063fba2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54694","PortSpecifier":{"PortValue":54694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54694","PortSpecifier":{"PortValue":54694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730747,"nanos":74178558},"http":{"id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"828f0000-333e-42bf-baad-9a0198bad103","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"]}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8481d5801a76"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4c80f7c3-6283-4944-ab10-65d897a65d59"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"828f0000-333e-42bf-baad-9a0198bad103","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c4f9cff-7eeb-48bf-b1ff-71fe26392e04","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51680","PortSpecifier":{"PortValue":51680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24bceabc-d708-4269-9a7c-39aedd0868da","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51680","PortSpecifier":{"PortValue":51680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730747,"nanos":110131225},"http":{"id":"24bceabc-d708-4269-9a7c-39aedd0868da","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0\"}"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","subscription":"e2e-rate-iso-a-f91385","tenant":"e2e-shared-a-7d1f11","userId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-f91385\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91385"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","selected_subscription":"e2e-rate-iso-a-f91385","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-f91385@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bceabc-d708-4269-9a7c-39aedd0868da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51688","PortSpecifier":{"PortValue":51688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51688","PortSpecifier":{"PortValue":51688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730748,"nanos":143767608},"http":{"id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0\"}"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","subscription":"e2e-rate-iso-a-f91385","tenant":"e2e-shared-a-7d1f11","userId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-f91385\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91385"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","selected_subscription":"e2e-rate-iso-a-f91385","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-f91385@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb389fbc-165e-4a87-8d6e-e262c4f18490","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51696","PortSpecifier":{"PortValue":51696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3541ec8-d898-9171-a0bf-923372e4b781","method":"POST","path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions","host":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51696","PortSpecifier":{"PortValue":51696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730749,"nanos":192446452},"http":{"id":"c3541ec8-d898-9171-a0bf-923372e4b781","method":"POST","headers":{":authority":"e2e-shared-a-7d1f11.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dO4iXnBHedSpJBp7_ak5pnssrRLW3GX1al7CyD0AetFJAU2MCOp9RrQPByM0\"}"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","subscription":"e2e-rate-iso-a-f91385","tenant":"e2e-shared-a-7d1f11","userId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\",\"requestedSubscription\":\"e2e-rate-iso-a-f91385\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7d1f11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7d1f11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91385"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6f078bcb-6596-4b39-a8b3-8e0770cc85b3","keyName":"e2e-rate-a-f91385","selected_subscription":"e2e-rate-iso-a-f91385","selected_subscription_key":"ai-tenant-e2e-shared-a-7d1f11/e2e-rate-iso-a-f91385@ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d1f11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91385","namespace":"ai-tenant-e2e-shared-a-7d1f11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7d1f11/rate-test-model-7d1f11"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3541ec8-d898-9171-a0bf-923372e4b781","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54702","PortSpecifier":{"PortValue":54702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","method":"POST","path":"/ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df/v1/completions","host":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54702","PortSpecifier":{"PortValue":54702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784730749,"nanos":226779928},"http":{"id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","method":"POST","headers":{":authority":"e2e-shared-b-f0b3df.apps.6a6899e1-566c-4bb6-8bc1-8481d5801a76.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lqlPlBBfT3WJaAk2_8OLwDYTnnNBNurSrewA2sDFkmUcTs370Hq9IDGhYBgm"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lqlPlBBfT3WJaAk2_8OLwDYTnnNBNurSrewA2sDFkmUcTs370Hq9IDGhYBgm\"}"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6eda90bd-6f8c-423f-bb76-610b735091b8","keyName":"e2e-rate-b-f91385","subscription":"e2e-rate-iso-b-f91385","tenant":"e2e-shared-b-f0b3df","userId":"6eda90bd-6f8c-423f-bb76-610b735091b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df\",\"requestedSubscription\":\"e2e-rate-iso-b-f91385\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0b3df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f0b3df","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f91385","namespace":"ai-tenant-e2e-shared-b-f0b3df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df"}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0b3df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f91385"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6eda90bd-6f8c-423f-bb76-610b735091b8","keyName":"e2e-rate-b-f91385","selected_subscription":"e2e-rate-iso-b-f91385","selected_subscription_key":"ai-tenant-e2e-shared-b-f0b3df/e2e-rate-iso-b-f91385@ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f0b3df","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f91385","namespace":"ai-tenant-e2e-shared-b-f0b3df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f0b3df/rate-test-model-f0b3df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T14:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bed2890-94ad-4ac9-b53b-a40d6b9f8dbb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T14:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f4c90b724b598030a1045dae07db6f2f16cb00f2dbc331e48a809f71786d59a"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b16120597ba786e69e5a9adf22a2caae1a70ec3ad0a2f803b2370bbeda387dc"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f2ccd7682077a1cf0f16d197ed167a6806c2d992ab52772ed12332f0ce9dcd9"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad9364235d67720ac413aacf301ea6cacac5929b69b5b7ed99bd222e57aaec67"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80f7947c9075a260dd667463e53373a95b13974228c0555a094e467692307755"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/053f775b319b4e95366deb5324700e415d43bfb353b1e4ff1ea42ffc5049a4fb"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/981a864ecdafada82d9bf7ab72b3c056c0e8bb6cba3d8851d5ea6ac32c62b68e"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9b406e716ddca4d4d8238a1060f6a643b62b18c6febf477fa7c1be72eeca5cc"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5956d7a4a8e3f5aea58414d6be0a032e4e25d17c56fda218e192bab020e1630c"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d5bd3d72ce4dfc1ab4a6d626750591a42188592573f145570d80760d6fc1e54"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ef8f08c37201240fd2b76a3d11ccb79efeb59df076457b1c5ba6fb5f90d190"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8054fdf894d3e1254e34025e7b9423da80c612dcbd75aad45a93c34c7e74256a"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d77792ec8930293429bbd68c66c4b8e053ca76829199ba492c65a1f23131c0f2"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a64f6a968be654027056068bee2de254e51d910b7cb83334c4443b6783c9fc"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20749fdfa69e9ef72a579489a5cc735400731069dc7cc3920a3bb4fb6faf4c8c"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e567f0cb4290309a47a31cc1a45f7a44c2c484f1808ed6a04ba8a6ce913288f"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56619e728f115ee09a3422979a538866c2d71cba51d9b58aea514c691c92914"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3e28aab0b842ecf1e939ae29fc98e52f91c08a9b58a9b98b17b76a55b023f7c"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/754479d45ac400b8de6fc25364f272e2628897506677bddf6c35fa0efd91ac55"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fdff7d437e0e98bd71680567abf9f703cd0ba95872cdca39d32186a1490efcc"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8aa3f3f1f66afe4b8d564c7ec9f6344005f7d42e83f6249683571a40ef7522d6"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9819e68d929cc314e1828284cfea2bfe659925c32e604824bb663dc6834ab49"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83849858133ffc9611af15c4ce646f7cdfc68c459ee7e52494523d318fb46800"}
{"level":"info","ts":"2026-07-22T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d815a6a703b8b917ce59b1dd0acb799e67547be2e57ab4cf7c49f0d5e72e53"}