{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82aee917-6d9c-44e5-b03e-d6b9cf2e011f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44268","PortSpecifier":{"PortValue":44268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44268","PortSpecifier":{"PortValue":44268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854581,"nanos":612836328},"http":{"id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"725564d7-f3cb-4c4a-b5c1-4c5db6152cbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34184","PortSpecifier":{"PortValue":34184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34184","PortSpecifier":{"PortValue":34184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854581,"nanos":654150476},"http":{"id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN\"}"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","subscription":"e2e-rate-iso-a-7bbe67","tenant":"e2e-shared-a-44952a","userId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-7bbe67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7bbe67"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","selected_subscription":"e2e-rate-iso-a-7bbe67","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-7bbe67@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1828ba55-d3dd-4cde-90ae-60b0e3806938","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34190","PortSpecifier":{"PortValue":34190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56825fb7-67c6-4343-a204-8302ad39cd4c","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34190","PortSpecifier":{"PortValue":34190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854582,"nanos":741616029},"http":{"id":"56825fb7-67c6-4343-a204-8302ad39cd4c","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN"}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN\"}"}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","subscription":"e2e-rate-iso-a-7bbe67","tenant":"e2e-shared-a-44952a","userId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-7bbe67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7bbe67"}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","selected_subscription":"e2e-rate-iso-a-7bbe67","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-7bbe67@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56825fb7-67c6-4343-a204-8302ad39cd4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71c66702-3711-43c6-a812-845026121fef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34206","PortSpecifier":{"PortValue":34206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71c66702-3711-43c6-a812-845026121fef","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71c66702-3711-43c6-a812-845026121fef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34206","PortSpecifier":{"PortValue":34206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854583,"nanos":783737251},"http":{"id":"71c66702-3711-43c6-a812-845026121fef","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN"}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71c66702-3711-43c6-a812-845026121fef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tjHmfp7R7i2Mubzl_vg2pHAs2Wn1rsX1UdXBUOdm32lbJC0ypIgcyqlr0KLN\"}"}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","subscription":"e2e-rate-iso-a-7bbe67","tenant":"e2e-shared-a-44952a","userId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71c66702-3711-43c6-a812-845026121fef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-7bbe67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71c66702-3711-43c6-a812-845026121fef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7bbe67"}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71c66702-3711-43c6-a812-845026121fef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"277b26e6-19ee-4a2c-a0d7-b759ea62fe58","keyName":"e2e-rate-a-7bbe67","selected_subscription":"e2e-rate-iso-a-7bbe67","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-7bbe67@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7bbe67","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71c66702-3711-43c6-a812-845026121fef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71c66702-3711-43c6-a812-845026121fef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45664","PortSpecifier":{"PortValue":45664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45664","PortSpecifier":{"PortValue":45664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854596,"nanos":844472514},"http":{"id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e225780d-ab1c-48a8-9dcd-617d293fd99e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45780","PortSpecifier":{"PortValue":45780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45780","PortSpecifier":{"PortValue":45780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854596,"nanos":882694985},"http":{"id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e9f1adc-7f27-4f49-940a-5d25f9d7b8da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45676","PortSpecifier":{"PortValue":45676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"526b3d60-f0b5-4b91-a136-bdc56e331686","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45676","PortSpecifier":{"PortValue":45676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854596,"nanos":915001499},"http":{"id":"526b3d60-f0b5-4b91-a136-bdc56e331686","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG\"}"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","subscription":"e2e-rate-iso-a-c4b064","tenant":"e2e-shared-a-44952a","userId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-c4b064\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4b064"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","selected_subscription":"e2e-rate-iso-a-c4b064","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-c4b064@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"526b3d60-f0b5-4b91-a136-bdc56e331686","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854597,"nanos":954292775},"http":{"id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG"}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG\"}"}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","subscription":"e2e-rate-iso-a-c4b064","tenant":"e2e-shared-a-44952a","userId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-c4b064\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4b064"}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","selected_subscription":"e2e-rate-iso-a-c4b064","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-c4b064@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f0f707-bf6a-493c-b0ba-958b0e18e749","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45696","PortSpecifier":{"PortValue":45696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ab24208-5624-408f-be2a-828f02a6ea3b","method":"POST","path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions","host":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45696","PortSpecifier":{"PortValue":45696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854598,"nanos":995171724},"http":{"id":"6ab24208-5624-408f-be2a-828f02a6ea3b","method":"POST","headers":{":authority":"e2e-shared-a-44952a.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG"}
{"level":"debug","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tU0jWOWHFoIMXaTq_yX90z0xj6yWoKGQxhudnmwcQb75FmRubIoprWvN4acG\"}"}
{"level":"debug","ts":"2026-07-24T00:56:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","subscription":"e2e-rate-iso-a-c4b064","tenant":"e2e-shared-a-44952a","userId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\",\"requestedSubscription\":\"e2e-rate-iso-a-c4b064\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44952a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44952a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4b064"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01f4ecd9-f590-4fe3-8840-5c0435cabc8c","keyName":"e2e-rate-a-c4b064","selected_subscription":"e2e-rate-iso-a-c4b064","selected_subscription_key":"ai-tenant-e2e-shared-a-44952a/e2e-rate-iso-a-c4b064@ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44952a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4b064","namespace":"ai-tenant-e2e-shared-a-44952a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-44952a/rate-test-model-44952a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab24208-5624-408f-be2a-828f02a6ea3b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45786","PortSpecifier":{"PortValue":45786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","method":"POST","path":"/ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b/v1/completions","host":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45786","PortSpecifier":{"PortValue":45786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854599,"nanos":26712922},"http":{"id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","method":"POST","headers":{":authority":"e2e-shared-b-91a75b.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GL64T5Ys5rpZLULz_DwiduKorOY1bZduT12jQ2PYZUPfDCUlAU3vN5NahBpQ"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GL64T5Ys5rpZLULz_DwiduKorOY1bZduT12jQ2PYZUPfDCUlAU3vN5NahBpQ\"}"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"372f3231-69f4-457c-b912-1d3097e2188a","keyName":"e2e-rate-b-c4b064","subscription":"e2e-rate-iso-b-c4b064","tenant":"e2e-shared-b-91a75b","userId":"372f3231-69f4-457c-b912-1d3097e2188a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b\",\"requestedSubscription\":\"e2e-rate-iso-b-c4b064\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-91a75b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-91a75b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4b064","namespace":"ai-tenant-e2e-shared-b-91a75b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b"}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-91a75b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c4b064"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"372f3231-69f4-457c-b912-1d3097e2188a","keyName":"e2e-rate-b-c4b064","selected_subscription":"e2e-rate-iso-b-c4b064","selected_subscription_key":"ai-tenant-e2e-shared-b-91a75b/e2e-rate-iso-b-c4b064@ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-91a75b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4b064","namespace":"ai-tenant-e2e-shared-b-91a75b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-91a75b/rate-test-model-91a75b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2e7950-2cd6-4e24-8e75-29b59ab671eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec9133eb47ba90b2c68021256747ca1b2f35a3f8f79c2d7d18023e23b7169c9"}
{"level":"info","ts":"2026-07-24T00:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18424b8181fbbc414d7eb7b2c52079b1a46916ee6580c578d1547fd199657884"}
{"level":"info","ts":"2026-07-24T00:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfedaa144583db1ef3f51d4b683b427b41c3beaf5cc388bb7a8769fb1bb7591a"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f78d5618fe8ab2826b1a0dcb597dcefec712d48137efe2f56cd91c5e476d7f90"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f872abc90d7e9638692c4a0c31cf4c7ccaa399c1a12a417c6bd5dc488ce242ef"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2e5ff0c94f7d3b753972aad5cc520cf174b7b4932dfa344c3427f9b31316f79"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cee868265e86ea55bfd1ccf0bc3a3e27bcbe66e3c4d8ca82f32bf959d33c3ec"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a851b717177387bd98f538050f37f04767ff4350ca796ab8db3924fbef844ac"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1fb98fab0006e93de02c7f30f5f251e0f84cf9398a8f787f9a77888f7471175"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/947db794ed5e8d249d7b60b8af3af8d2d08bee312b69cdfc8a13cf928b3df264"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/799c21c6387f4efb004c863b0a5a06cca994ca7195dc1267fcd9d945956831da"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84b03edc5cb9601e0da739185810c70f598e2e88cf9717479f09e40714548154"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b13134ec1800b3df7008404848b5617a077e05bff80afdd65da021cbe9c18f4"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f94b30f58c6ee68c3baa29334aade7abc486aefd71ded3d896864f733a3d68"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/872f177aee61b27eacee2cc90a9987044f1cc7d1aef313a82ca106ebde5c1c18"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2868a5d76b96fa5cfcf339a5df3c04ed28115ac8945b88d768a085ea6ac315d7"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5947b45fd33276d9517d4bc1f10fd85103fa0df6104984e22da14e23abce27d"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6945b5ae42f8761807b8d754be11fa01d1f8361ed4fc8e4f87b2b857212055df"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80f5212c11f8d6580e4c3baaff7f8c1ff3a03e4ca235ff3db24f2b09b9514922"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d66ad3782dfb01f390d12fdbac2c4c9999c373a9c8b1392957f398b92a10ff44"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad2e629cafa8b26a1c5d9b45c02456d3cbef9029955d40b363748e8c23a73d75"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfa7ca9a454afcc7a91942fe6fe8394fcf77dd1f5356cda27b6670cf5836c0b"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15e5731815fa7bae021706d9e8d3e48343b604d45e7de718d6498f376ca11490"}
{"level":"info","ts":"2026-07-24T00:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97114f5b165f8d06ab4588f0d29a99fce205287e373f76e70801f1d93b6fc5eb"}
{"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40584","PortSpecifier":{"PortValue":40584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.19:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6a108bf-a5bb-410b-93d4-baa244ada496","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40584","PortSpecifier":{"PortValue":40584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.19:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854662,"nanos":630568680},"http":{"id":"f6a108bf-a5bb-410b-93d4-baa244ada496","method":"POST","headers":{":authority":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.19:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a108bf-a5bb-410b-93d4-baa244ada496","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40590","PortSpecifier":{"PortValue":40590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.19:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40590","PortSpecifier":{"PortValue":40590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.19:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854662,"nanos":710505052},"http":{"id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","method":"POST","headers":{":authority":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VSVVJX4RCgOOAgXE_Ge3cgNLW0JsvhjJM3yFNNCIfoqAswJd0VUBRtx1VIYN"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VSVVJX4RCgOOAgXE_Ge3cgNLW0JsvhjJM3yFNNCIfoqAswJd0VUBRtx1VIYN\"}"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"42d1ab09-9dd0-45f8-aa05-15cb5a6e9b00","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"42d1ab09-9dd0-45f8-aa05-15cb5a6e9b00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.19:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"42d1ab09-9dd0-45f8-aa05-15cb5a6e9b00","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"355c0766-2eb0-4f12-8bc2-253e65c9f9eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"}
{"level":"error","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"}
{"level":"error","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"}
{"level":"info","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38006","PortSpecifier":{"PortValue":38006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38006","PortSpecifier":{"PortValue":38006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854707,"nanos":618598300},"http":{"id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","method":"POST","headers":{":authority":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"]}}
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c3f6697833b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=55b73056-5570-40ee-adb1-5404db17d8dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ee50ed-a252-45c0-9f83-968c8bdcf483","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-193ff5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f66d4e6-8770-4c0a-9e5c-5c38f74d26d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38012","PortSpecifier":{"PortValue":38012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","method":"POST","path":"/ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5/v1/chat/completions","host":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38012","PortSpecifier":{"PortValue":38012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854709,"nanos":684272015},"http":{"id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","method":"POST","headers":{":authority":"e2e-ipp-a-193ff5.apps.88a1ef7b-22ba-438d-a3bd-c3f6697833b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HuSwEhRLrXgy6qq5_GDhOGpjuWlbLzgBb2S1ru3NOIOpUyKRLRVIM68ALnWM"}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-193ff5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HuSwEhRLrXgy6qq5_GDhOGpjuWlbLzgBb2S1ru3NOIOpUyKRLRVIM68ALnWM\"}"}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-193ff5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5923c0ac-50c6-4d74-b3ff-1773ecf79d72","keyName":"e2e-ipp-193ff5","subscription":"ipp-route-193ff5-sub","tenant":"e2e-ipp-a-193ff5","userId":"5923c0ac-50c6-4d74-b3ff-1773ecf79d72","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-193ff5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5\",\"requestedSubscription\":\"ipp-route-193ff5-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-193ff5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-193ff5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-193ff5-sub","namespace":"ai-tenant-e2e-ipp-a-193ff5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5"}}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-193ff5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-193ff5-sub"}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5923c0ac-50c6-4d74-b3ff-1773ecf79d72","keyName":"e2e-ipp-193ff5","selected_subscription":"ipp-route-193ff5-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5-sub@ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-193ff5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-193ff5-sub","namespace":"ai-tenant-e2e-ipp-a-193ff5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-193ff5/ipp-route-193ff5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:58:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c00cf0-b6dc-443d-b359-1490b6b15e80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/052f54f500605a605c8a3e8abdfbe9015f359d2d69b87f692c45bacc5ffcae14"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95fde24fa692c76f25184e89a360ea5ab31e8cc5de07f96d65a4d2d509ce768b"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/addceed53d6fde4f187e11cf916f64e5d94d1bbdab27e376c848d01991213164"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c589c50ef5069ae8ef2a782c79a9a4dff831e23eb1845f589ca8303b43e39e4"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5a2728532cacfa2c703f5d9215cccc1684987a63e2c3675e96283f627e1d3fc"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c69b57589e0ab481a5de019b61f097705427c39cb16f7d4f7353e5f4c47e7585"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ef269d3c011c7983cb1c0b1b5357846e0f6cf011bda9dcc1379d1fdf6e495a8"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da26b9e2888692b59e64f6d14d1226b39b480ee43c89884d7ea4598451a09193"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d3f7e482fbfda7f3e6414d444716fca7591291d27c56880009476e347038d14"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0fdd352201958275dc57b521b27b34cd78e29b992405357057121db3d30b595"}
{"level":"info","ts":"2026-07-24T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93218dc97980f32b48625d1714857bb45d9151f0915d499a0ec777e73e219493"}
{"level":"info","ts":"2026-07-24T00:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/438ba0aec1d6f8691a310b9f84295f7f3839db29b4fa2ec0229947f0649f3a25"}