{"level":"debug","ts":"2026-07-24T20:18:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:18:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:18:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"}
{"level":"info","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d346d350-03f8-45e3-9add-ab4512cb701c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924327,"nanos":952947774},"http":{"id":"d346d350-03f8-45e3-9add-ab4512cb701c","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d346d350-03f8-45e3-9add-ab4512cb701c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33600","PortSpecifier":{"PortValue":33600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ff55d12-86e3-4666-8f44-22966490fbae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33600","PortSpecifier":{"PortValue":33600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924327,"nanos":993146025},"http":{"id":"5ff55d12-86e3-4666-8f44-22966490fbae","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ff55d12-86e3-4666-8f44-22966490fbae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57886","PortSpecifier":{"PortValue":57886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57886","PortSpecifier":{"PortValue":57886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924328,"nanos":32397785},"http":{"id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE\"}"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","subscription":"e2e-rate-iso-a-3d1927","tenant":"e2e-shared-a-53d0a0","userId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1927\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1927"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","selected_subscription":"e2e-rate-iso-a-3d1927","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-3d1927@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7587ac3e-cd5b-4f88-b60f-123ac903ab47","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60112","PortSpecifier":{"PortValue":60112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60112","PortSpecifier":{"PortValue":60112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924329,"nanos":122547980},"http":{"id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE"}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE\"}"}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","subscription":"e2e-rate-iso-a-3d1927","tenant":"e2e-shared-a-53d0a0","userId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1927\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1927"}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","selected_subscription":"e2e-rate-iso-a-3d1927","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-3d1927@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:18:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6def813-a142-496d-9ae9-07e5a3bc6a91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60116","PortSpecifier":{"PortValue":60116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60116","PortSpecifier":{"PortValue":60116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924330,"nanos":170065503},"http":{"id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE"}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tLpPTBAP1h9h7CYO_2QZQRrqiuMnpSkUzRSJVnZrPzvgFuNaUQtDgdlqaEgE\"}"}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","subscription":"e2e-rate-iso-a-3d1927","tenant":"e2e-shared-a-53d0a0","userId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1927\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1927"}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88871a6f-eacc-4ea0-b6e8-eaf520d828c3","keyName":"e2e-rate-a-3d1927","selected_subscription":"e2e-rate-iso-a-3d1927","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-3d1927@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1927","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c3c7312-04f7-4ed0-bba3-4bec7f1b6080","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c80e1735-e446-432c-ad51-91beab0ba402","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48218","PortSpecifier":{"PortValue":48218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c80e1735-e446-432c-ad51-91beab0ba402","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c80e1735-e446-432c-ad51-91beab0ba402","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48218","PortSpecifier":{"PortValue":48218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924343,"nanos":15185342},"http":{"id":"c80e1735-e446-432c-ad51-91beab0ba402","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c80e1735-e446-432c-ad51-91beab0ba402","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c80e1735-e446-432c-ad51-91beab0ba402","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c80e1735-e446-432c-ad51-91beab0ba402","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c80e1735-e446-432c-ad51-91beab0ba402","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c80e1735-e446-432c-ad51-91beab0ba402","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55894","PortSpecifier":{"PortValue":55894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c869cece-7758-4e7b-a035-693a9e7ff321","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55894","PortSpecifier":{"PortValue":55894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924343,"nanos":58584064},"http":{"id":"c869cece-7758-4e7b-a035-693a9e7ff321","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c869cece-7758-4e7b-a035-693a9e7ff321","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48220","PortSpecifier":{"PortValue":48220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48220","PortSpecifier":{"PortValue":48220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924343,"nanos":98626415},"http":{"id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l\"}"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","subscription":"e2e-rate-iso-a-39cdd5","tenant":"e2e-shared-a-53d0a0","userId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-39cdd5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-39cdd5"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","selected_subscription":"e2e-rate-iso-a-39cdd5","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-39cdd5@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39e36a4b-e5b6-443a-a49a-17a26b3486f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48230","PortSpecifier":{"PortValue":48230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93ea7977-5980-4501-8af1-b0e8d6074f41","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48230","PortSpecifier":{"PortValue":48230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924344,"nanos":148375295},"http":{"id":"93ea7977-5980-4501-8af1-b0e8d6074f41","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l"}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l\"}"}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","subscription":"e2e-rate-iso-a-39cdd5","tenant":"e2e-shared-a-53d0a0","userId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-39cdd5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-39cdd5"}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","selected_subscription":"e2e-rate-iso-a-39cdd5","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-39cdd5@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93ea7977-5980-4501-8af1-b0e8d6074f41","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48246","PortSpecifier":{"PortValue":48246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ccfe21d-7491-466a-859d-06c0a09086c7","method":"POST","path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions","host":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48246","PortSpecifier":{"PortValue":48246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924345,"nanos":189111969},"http":{"id":"5ccfe21d-7491-466a-859d-06c0a09086c7","method":"POST","headers":{":authority":"e2e-shared-a-53d0a0.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Mzab1N2cKVeOJjkF_lxUR5x5R00CGMVhs4RHsgsYqHM2XFgo14PH4VRFnj4l\"}"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","subscription":"e2e-rate-iso-a-39cdd5","tenant":"e2e-shared-a-53d0a0","userId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\",\"requestedSubscription\":\"e2e-rate-iso-a-39cdd5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-53d0a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-53d0a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-39cdd5"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f1193719-e7c9-4070-a2e3-ab198642a0cb","keyName":"e2e-rate-a-39cdd5","selected_subscription":"e2e-rate-iso-a-39cdd5","selected_subscription_key":"ai-tenant-e2e-shared-a-53d0a0/e2e-rate-iso-a-39cdd5@ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-53d0a0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39cdd5","namespace":"ai-tenant-e2e-shared-a-53d0a0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-53d0a0/rate-test-model-53d0a0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccfe21d-7491-466a-859d-06c0a09086c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55900","PortSpecifier":{"PortValue":55900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","method":"POST","path":"/ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9/v1/completions","host":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55900","PortSpecifier":{"PortValue":55900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924345,"nanos":226045262},"http":{"id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","method":"POST","headers":{":authority":"e2e-shared-b-3f5fc9.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ogkRniHGqzequXy_tn33ykSwcX3rnp6JXmXYlO1fzhuDysjzqSSdJJ9qzxP"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ogkRniHGqzequXy_tn33ykSwcX3rnp6JXmXYlO1fzhuDysjzqSSdJJ9qzxP\"}"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2803ba7d-97ac-423f-b8a4-80af4c8e3f52","keyName":"e2e-rate-b-39cdd5","subscription":"e2e-rate-iso-b-39cdd5","tenant":"e2e-shared-b-3f5fc9","userId":"2803ba7d-97ac-423f-b8a4-80af4c8e3f52","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9\",\"requestedSubscription\":\"e2e-rate-iso-b-39cdd5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3f5fc9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3f5fc9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-39cdd5","namespace":"ai-tenant-e2e-shared-b-3f5fc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9"}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3f5fc9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-39cdd5"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2803ba7d-97ac-423f-b8a4-80af4c8e3f52","keyName":"e2e-rate-b-39cdd5","selected_subscription":"e2e-rate-iso-b-39cdd5","selected_subscription_key":"ai-tenant-e2e-shared-b-3f5fc9/e2e-rate-iso-b-39cdd5@ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3f5fc9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-39cdd5","namespace":"ai-tenant-e2e-shared-b-3f5fc9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3f5fc9/rate-test-model-3f5fc9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1504c96-f5f3-4cf5-8613-1c08d5fafd47","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fb81137a747db887f0913eb0c7a3f1ae1a7014625fe7cc37d6b8eb3c16c51f7"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70dc6222cd324628bfb24237b1835a4aefe2cdc62cf59af7b62ea09569c118a5"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a493a81df34676a16a042724eaed44f9d64337c545f2bc273ba1cb09e41ca088"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/855621a3e871a46f5ef381d4c5ec0960f96a0f1ed98647d9993e12fb0bebd706"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5b28c94391e7027073727fa5b88ebf40c56646912469f49954bacf308df5010"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5869db79067f81751f4b0108f8a27332d7368522b99b52dda5c05d56e5422926"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99a2016d673da63384f08b1e2a3a9d10d8f167dadc61bbc58ac3e28ebb0254e4"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/700e2ec129fa2cb875830ca6f4a8279830402aac34f25835a88fb72b5164738d"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ca4072ade7f0d6e53280a4bcab690ed94471afd868f5e89aa05a03976ecd54a"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e2224f35a4e94385cd3bffcfbd0b39d32a38745684d4f2db37205297b101ee7"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9bad1486b14d2b3bd69710a98e9173d5f7789eb5dce5d2896c32582f28ae09a"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e97208d1bed487e8824b652fad5033caed8842e60ae6afca0a84ec01a2e1b3b1"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f646ccb133b4877fd02118a5472d1afc4a16b51cf48c662ced5ed877724a4da"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b7bd95d2515639ecf39f30d68699751efbb4ceff7e97754259b2d908a239f02"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/149f23c02dc46b8a524c64687c5da678046e38c8867d01c4c61e193aa16c622c"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/362f77ee079ff952a100b8b0ca2a282fe8ad3ff4c30c31b3527239e801f8ae10"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93273d12d5ab33e4879e85f978eb6c7125f17daa9497f038bb149e7d31683883"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d8e95ad4eae8d4bc0657d7334e568d9d3d6cf030ba81c574885545cb3c0321a"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37a4e6ec51c476ef2a276e8c75c06bd661c20dd28e46158c237bb5fe7905d36d"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51babc4fd382198538885860f0ecd611e19ef209400ddf1f8ffdec8ba853c01f"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/592ca6631f4bb263dd74a704c3e6c9ea3bfc0265ea07b1be7082cb2e9037daea"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaf10af990f154caf14444ea4fdbcf212f573a3d0e62152afb8680eec885ac88"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cabfc19c58915dd8790d952b5cf981f3f6718cee35753518e7f408459352f1cf"}
{"level":"info","ts":"2026-07-24T20:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa3158be0c1d8c3a3e4670210b5af4540bd24856130bb0c4287e01c6e8db16b2"}
{"level":"info","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d46039e-d37c-4316-aade-b92c5aeae105","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43346","PortSpecifier":{"PortValue":43346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924409,"nanos":537643495},"http":{"id":"5d46039e-d37c-4316-aade-b92c5aeae105","method":"POST","headers":{":authority":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d46039e-d37c-4316-aade-b92c5aeae105","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43358","PortSpecifier":{"PortValue":43358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15944bf8-5783-46ee-a570-c91b104ba64c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43358","PortSpecifier":{"PortValue":43358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924409,"nanos":596832219},"http":{"id":"15944bf8-5783-46ee-a570-c91b104ba64c","method":"POST","headers":{":authority":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TpCcKkg8HlvHgYl4_8lWG4CVsj2j9C4JCaKykNKew98LsHev2AzJEFmpDmsU"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TpCcKkg8HlvHgYl4_8lWG4CVsj2j9C4JCaKykNKew98LsHev2AzJEFmpDmsU\"}"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b64ef822-3d23-48f7-a0d2-83f76c7d9f61","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"b64ef822-3d23-48f7-a0d2-83f76c7d9f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b64ef822-3d23-48f7-a0d2-83f76c7d9f61","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15944bf8-5783-46ee-a570-c91b104ba64c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"}
{"level":"debug","ts":"2026-07-24T20:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"}
{"level":"error","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"}
{"level":"error","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082"}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T20:20:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"}
{"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"}
{"level":"debug","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T20:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T20:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T20:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"}
{"level":"info","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54332","PortSpecifier":{"PortValue":54332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54332","PortSpecifier":{"PortValue":54332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924449,"nanos":174886399},"http":{"id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","method":"POST","headers":{":authority":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"]}}
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/36fa856bddab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=13b04604-7380-4014-9002-942f2a7c3e12"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"672e36f4-6d11-464c-bc33-751c34cd7a98","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-937547/ipp-route-937547\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-937547/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71fb139e-d8bd-43b5-8bb0-70b2855c5965","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54346","PortSpecifier":{"PortValue":54346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","method":"POST","path":"/ai-tenant-e2e-ipp-a-937547/ipp-route-937547/v1/chat/completions","host":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54346","PortSpecifier":{"PortValue":54346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784924451,"nanos":245608509},"http":{"id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","method":"POST","headers":{":authority":"e2e-ipp-a-937547.apps.072de3a2-0c99-4641-a9cc-36fa856bddab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-937547/ipp-route-937547/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fSDuJug89VQGIeMB_qJBRQTPytuwjz94BhaHa7NJwheVae6zCzKrC8CwtJa2"}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-937547.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fSDuJug89VQGIeMB_qJBRQTPytuwjz94BhaHa7NJwheVae6zCzKrC8CwtJa2\"}"}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-937547.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fef9d508-fee5-488a-89d0-b9c9c1fb752c","keyName":"e2e-ipp-937547","subscription":"ipp-route-937547-sub","tenant":"e2e-ipp-a-937547","userId":"fef9d508-fee5-488a-89d0-b9c9c1fb752c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-937547.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-937547/ipp-route-937547\",\"requestedSubscription\":\"ipp-route-937547-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-937547.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-937547","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-937547-sub","namespace":"ai-tenant-e2e-ipp-a-937547","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-937547/ipp-route-937547"}}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-937547/ipp-route-937547\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-937547/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-937547-sub"}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fef9d508-fee5-488a-89d0-b9c9c1fb752c","keyName":"e2e-ipp-937547","selected_subscription":"ipp-route-937547-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-937547/ipp-route-937547-sub@ai-tenant-e2e-ipp-a-937547/ipp-route-937547","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-937547","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-937547-sub","namespace":"ai-tenant-e2e-ipp-a-937547","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-937547/ipp-route-937547"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T20:20:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a09e75-2b88-488b-a196-37c2c2a0c3ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/240e19450a3b67a5926d5085620fc996099539fd16a19d4707027d0a055d6384"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77836c3231f7059bb8a86ff575bee90950af8a55afae91620ae64661d66de710"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7011f2243163e76fd858e892f342e71ac72bb4bcb05fcfcaca9f902a4d356c22"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a0a7aa28d3ed40573a2a57fe58d7c89ab3b93553dc085d78b63f00fbf9645a8"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d578da5138a6d5ce50487e5fe61d085d9dbfcf631330120f495bd6bd16ca6bf"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0230607fc02688fd18a8ad876e458c2da8f89c15ef42e86d54ec70282255aa3"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86de816ee92328b5c692d7b66ee67880a1131dc411c67155be5970ddb0da3b1c"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2af7f45e11139ae3f5c9cd2b7e4d2967078856c5597af3ae9e4c7b0dca5db7e9"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd6af86074fe766e7a15da992fec2509eaf8a2fc7766cbc7699e5117d3246154"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/220668b3c2de80f9feec7136696f8f83b7d1fa4ccf426713dba28e337d9e1493"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf359b8b0893978c46eea913d38bf0d6ede5f1e768e327bea33b0981659e6082"}
{"level":"info","ts":"2026-07-24T20:21:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e86db25d245bd8ef00f02d39ee0568a737ff766f3c11a694f1e9fa3ef3f2103"}