{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85"}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6"}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0"}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd"}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3"}
{"level":"info","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29"}
{"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"}
{"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"}
{"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"}
{"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"}
{"level":"error","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35814","PortSpecifier":{"PortValue":35814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35814","PortSpecifier":{"PortValue":35814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923814,"nanos":51921228},"http":{"id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7890a14-b1b9-4748-a21f-c05eb51ad8b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50868","PortSpecifier":{"PortValue":50868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50868","PortSpecifier":{"PortValue":50868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923814,"nanos":92817855},"http":{"id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90e7a0ef-da87-4a76-b849-2e07b7058afd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35816","PortSpecifier":{"PortValue":35816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35816","PortSpecifier":{"PortValue":35816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923814,"nanos":134754112},"http":{"id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm\"}"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","subscription":"e2e-rate-iso-a-b29ed7","tenant":"e2e-shared-a-8abb86","userId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-b29ed7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b29ed7"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","selected_subscription":"e2e-rate-iso-a-b29ed7","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-b29ed7@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a224a55-00ef-4f7a-8075-6d9bc8ef9ace","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35822","PortSpecifier":{"PortValue":35822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35822","PortSpecifier":{"PortValue":35822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923815,"nanos":221604420},"http":{"id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm"}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm\"}"}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","subscription":"e2e-rate-iso-a-b29ed7","tenant":"e2e-shared-a-8abb86","userId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-b29ed7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b29ed7"}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","selected_subscription":"e2e-rate-iso-a-b29ed7","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-b29ed7@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd10c331-afde-4a7e-bcd9-d887f2480faa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35826","PortSpecifier":{"PortValue":35826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35826","PortSpecifier":{"PortValue":35826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923816,"nanos":260647208},"http":{"id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm"}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rNXprUx0YsjyQofB_dQqyU0twUuDnhWvJxKfCufIQsJzVuTE1MsuXaDyeOHm\"}"}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","subscription":"e2e-rate-iso-a-b29ed7","tenant":"e2e-shared-a-8abb86","userId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-b29ed7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b29ed7"}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6be72cd1-52f7-465d-a87f-006668d2b8ba","keyName":"e2e-rate-a-b29ed7","selected_subscription":"e2e-rate-iso-a-b29ed7","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-b29ed7@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b29ed7","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f6df1f-6f75-4659-9352-4bebc14a2eb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52976","PortSpecifier":{"PortValue":52976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52976","PortSpecifier":{"PortValue":52976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923827,"nanos":158052846},"http":{"id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe32c5c3-f706-4db1-8c3f-feafa530cbdc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41714","PortSpecifier":{"PortValue":41714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41714","PortSpecifier":{"PortValue":41714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923827,"nanos":196365627},"http":{"id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff1809bb-8f8c-44b4-9923-78b8bb84372a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bef6547c-c09e-4486-a5a5-32c183029623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52988","PortSpecifier":{"PortValue":52988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bef6547c-c09e-4486-a5a5-32c183029623","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bef6547c-c09e-4486-a5a5-32c183029623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52988","PortSpecifier":{"PortValue":52988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923827,"nanos":232502505},"http":{"id":"bef6547c-c09e-4486-a5a5-32c183029623","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN\"}"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","subscription":"e2e-rate-iso-a-abb57e","tenant":"e2e-shared-a-8abb86","userId":"202b3c68-0d76-4cc2-9e71-312effc621cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-abb57e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bef6547c-c09e-4486-a5a5-32c183029623","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-abb57e"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef6547c-c09e-4486-a5a5-32c183029623","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","selected_subscription":"e2e-rate-iso-a-abb57e","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-abb57e@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bef6547c-c09e-4486-a5a5-32c183029623","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bef6547c-c09e-4486-a5a5-32c183029623","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53004","PortSpecifier":{"PortValue":53004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53004","PortSpecifier":{"PortValue":53004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923828,"nanos":279060100},"http":{"id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN"}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN\"}"}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","subscription":"e2e-rate-iso-a-abb57e","tenant":"e2e-shared-a-8abb86","userId":"202b3c68-0d76-4cc2-9e71-312effc621cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-abb57e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-abb57e"}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","selected_subscription":"e2e-rate-iso-a-abb57e","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-abb57e@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b2b8ec3-6c9f-4bea-9c26-9b5b3d73c9a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48220","PortSpecifier":{"PortValue":48220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"deed63fd-2e2b-4ea8-942c-586beecdead4","method":"POST","path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions","host":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48220","PortSpecifier":{"PortValue":48220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923829,"nanos":321674825},"http":{"id":"deed63fd-2e2b-4ea8-942c-586beecdead4","method":"POST","headers":{":authority":"e2e-shared-a-8abb86.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7b9lOHUfk9nofDq8_vnHZx8sShHgxdIeddyOOeQ63uzD3XJc88q9SP56toLN\"}"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","subscription":"e2e-rate-iso-a-abb57e","tenant":"e2e-shared-a-8abb86","userId":"202b3c68-0d76-4cc2-9e71-312effc621cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\",\"requestedSubscription\":\"e2e-rate-iso-a-abb57e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8abb86.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8abb86/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-abb57e"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"202b3c68-0d76-4cc2-9e71-312effc621cb","keyName":"e2e-rate-a-abb57e","selected_subscription":"e2e-rate-iso-a-abb57e","selected_subscription_key":"ai-tenant-e2e-shared-a-8abb86/e2e-rate-iso-a-abb57e@ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8abb86","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abb57e","namespace":"ai-tenant-e2e-shared-a-8abb86","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8abb86/rate-test-model-8abb86"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deed63fd-2e2b-4ea8-942c-586beecdead4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57968","PortSpecifier":{"PortValue":57968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdb247f4-084d-4349-9a88-2b705018fd34","method":"POST","path":"/ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4/v1/completions","host":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57968","PortSpecifier":{"PortValue":57968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923829,"nanos":357002421},"http":{"id":"bdb247f4-084d-4349-9a88-2b705018fd34","method":"POST","headers":{":authority":"e2e-shared-b-3e15b4.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-e1Ci52SUxkIscW0W_fHNhDJcVUhExCPy8KJiNSgg6H1sCYM2nc4UgywsBC1E"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-e1Ci52SUxkIscW0W_fHNhDJcVUhExCPy8KJiNSgg6H1sCYM2nc4UgywsBC1E\"}"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ffc6397b-3075-417c-a8d1-95b0f8d50f3e","keyName":"e2e-rate-b-abb57e","subscription":"e2e-rate-iso-b-abb57e","tenant":"e2e-shared-b-3e15b4","userId":"ffc6397b-3075-417c-a8d1-95b0f8d50f3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4\",\"requestedSubscription\":\"e2e-rate-iso-b-abb57e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3e15b4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3e15b4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-abb57e","namespace":"ai-tenant-e2e-shared-b-3e15b4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4"}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3e15b4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-abb57e"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ffc6397b-3075-417c-a8d1-95b0f8d50f3e","keyName":"e2e-rate-b-abb57e","selected_subscription":"e2e-rate-iso-b-abb57e","selected_subscription_key":"ai-tenant-e2e-shared-b-3e15b4/e2e-rate-iso-b-abb57e@ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3e15b4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-abb57e","namespace":"ai-tenant-e2e-shared-b-3e15b4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3e15b4/rate-test-model-3e15b4"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb247f4-084d-4349-9a88-2b705018fd34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/385111e6f78582d0aa3f3cb4a9d8f2b5080a9c0c19ebaa1efc116826a69c506d"}
{"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48de101bba08452ba28b914f85791b3f92986c003506a8aa2504e839b2e91105"}
{"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07b453e019829cd101954156b9ac84086ebf626b15162b2b0f3d4d5314544c6"}
{"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eddddaa1ede5e4c5dd0737b046f4e3affb7ed4f571898376188b47d3bc6a9f6"}
{"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9c0be1b1ecbc8f00c7c36d21811212a293dbff2a7c027575ca123893a078b9c"}
{"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0a5fc97a278ce2fe42de69ae77887e18facdf31cfb7d536eb7ecf91b5895c9f"}
{"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba94a098bad9d3a7d3c56800b9584a3bc1db58718879501f088197a8a6d2b80b"}
{"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3386f247ef03d84edde3cd5bef1a7756395401638d7821a880cc601aae612836"}
{"level":"info","ts":"2026-07-24T20:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78f7a31be5e3a5842f8d9bc0cc3bac90a9551202431326d963e965f75dc411c9"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18b7e9f7cc2fcf389e68bb74cd1a0b12b3424ea6e1eede5439b96e5c96362750"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb23590c3e358819b9986c9bd4c14acca2f25966ad4b7ffa93ae88123d337cf6"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de28fa60e3b2395205321d2bdad76cfe97c469117c32adee77557c5da2d64cdd"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73b9983859df61f7ea2d530196e52ca616489bd4bdd30b177e500cbff35444a4"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0825eab847eda268bc8d6d85daa618d7cc77a5d4906a615fe7cebe96f682ee85"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/371619ebcd252b15517809310de09d6576f8e3641f03e1b85da0202bd83d2d70"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e1f5a7e01145dff6bd46b9cfa4e6580c493cebca8cd1f653107fca547e33f29"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cc032a3640ea6208e4ce19bf482a508e1a468cc7ee3de7f74b80c5c9495c0c6"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce5eabdee2dd3df857248c0aaf8623ca2b84e39e3402307503258905bc87eec6"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8d13eca615ea1ce3a88b3c925e3634eadeb9b895e71da06cecd3798ced19af0"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db373ad06cdde6f266c0981fb0db2a98ce845e8dffe15339d17f160a4f946ab6"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/692ccf05b729c817cdd9f5470c5fa5ae5c3770eb9911736b313442ed6a6ef12d"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71d39e70d342901b4bbfa28fdcdc94a48de6ee9c069e922a3d394571891d9499"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b99f240fc486cb729ddeaed9e692a30ea266a972adf6bb4583a6c170a3a50c8"}
{"level":"info","ts":"2026-07-24T20:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c339a86fb16a172a4a445b319974dff9fc052d35614ee516e67dd57c30299cf3"}
{"level":"info","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49214","PortSpecifier":{"PortValue":49214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa393420-0394-4211-91ab-32cffb4cbef5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49214","PortSpecifier":{"PortValue":49214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923906,"nanos":377188281},"http":{"id":"fa393420-0394-4211-91ab-32cffb4cbef5","method":"POST","headers":{":authority":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa393420-0394-4211-91ab-32cffb4cbef5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923906,"nanos":428512351},"http":{"id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","method":"POST","headers":{":authority":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ILFTpaJVmrtaB0aU_IIg3So1Aqcdtt1t6xd0dQdGyM5Od0u274byASftmHe2"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ILFTpaJVmrtaB0aU_IIg3So1Aqcdtt1t6xd0dQdGyM5Od0u274byASftmHe2\"}"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"efe85701-8aaa-42a8-81d9-d5b96bb38e68","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"efe85701-8aaa-42a8-81d9-d5b96bb38e68","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"efe85701-8aaa-42a8-81d9-d5b96bb38e68","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:11:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d9a38e9-abde-445a-9e83-03b979a27cd3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"}
{"level":"error","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"}
{"level":"info","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"}
{"level":"error","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:12:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"}
{"level":"info","ts":"2026-07-24T20:12:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"}
{"level":"info","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59026","PortSpecifier":{"PortValue":59026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59026","PortSpecifier":{"PortValue":59026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923971,"nanos":718042727},"http":{"id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","method":"POST","headers":{":authority":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"]}}
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/09b48327b65a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=236bdef8-0fff-421c-9ff0-a50b587f6507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a226dd2c-144b-4ee2-9b33-138e04b53ddb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-11ccc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:12:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3033ceb-a9af-40f0-812c-7a2a5956ef4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59040","PortSpecifier":{"PortValue":59040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","method":"POST","path":"/ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9/v1/chat/completions","host":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59040","PortSpecifier":{"PortValue":59040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784923973,"nanos":784057672},"http":{"id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","method":"POST","headers":{":authority":"e2e-ipp-a-11ccc9.apps.0e4ee567-89af-4dcd-a261-09b48327b65a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KcvRwctWrZP0cwjr_P79RhdxCG3I2Lbloyjjk3CXMaVAQaChynKX7FOpQutg"}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-11ccc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KcvRwctWrZP0cwjr_P79RhdxCG3I2Lbloyjjk3CXMaVAQaChynKX7FOpQutg\"}"}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-11ccc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62571687-df59-410b-bb39-4f6eae3899a9","keyName":"e2e-ipp-11ccc9","subscription":"ipp-route-11ccc9-sub","tenant":"e2e-ipp-a-11ccc9","userId":"62571687-df59-410b-bb39-4f6eae3899a9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-11ccc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9\",\"requestedSubscription\":\"ipp-route-11ccc9-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-11ccc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-11ccc9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-11ccc9-sub","namespace":"ai-tenant-e2e-ipp-a-11ccc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9"}}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-11ccc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-11ccc9-sub"}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62571687-df59-410b-bb39-4f6eae3899a9","keyName":"e2e-ipp-11ccc9","selected_subscription":"ipp-route-11ccc9-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9-sub@ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-11ccc9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-11ccc9-sub","namespace":"ai-tenant-e2e-ipp-a-11ccc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-11ccc9/ipp-route-11ccc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:12:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80018dfb-123c-4af4-9c1a-2ccbb1439e3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/586739a7687a6b234780aca349357a5ab72959fafd116eda428e1b90eda79b45"}
{"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f4a6f4b55a9863798bcb5ccda30074d0951123a03de837ecf9ea04f94fe71aa"}
{"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f548313a068441fa2abdfa887a124a08b43aec3d7b9c73988bb408ae8cbf6b5f"}
{"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/518b5ea69f203b88ddadad91eeba3ee7be713fed67e3adc15033ceff1056b0ee"}
{"level":"info","ts":"2026-07-24T20:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a72412f7b3a3b9d0a10fe452524d2ad18f28aacb51f1a4398fee797a61df00d"}
{"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/381c993c680a5b22358e38b27a9da1345ef39408c99d079d9177e7b94aace795"}
{"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa69fb5e5438e9c6b447ddab126c17d32931b3019526f559e5113ebbe2d934a8"}
{"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/291828918c6bf0ded2343952a2f97d81aed9766a20abc8e8b714932f17a56216"}
{"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4b4c73de844f557a5d4f61da685e02c9e70148ab871e32e7071ec71a0cef903"}
{"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c50b35d5eca37bb429332d73e7293e5e725b14d04f8f7d8b5a597bc83f55b7dc"}
{"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96b8f4a1988a3011d6d9be899dea7282c2f114c8bdec44a8355f841692b9db57"}
{"level":"info","ts":"2026-07-24T20:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35997f601c69dd68936f3cddebda36bd3f5d144cec4ae4fbfaa19e9b9911c011"}