{"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e2bddc7b16edf465bcfc2d34d035b074819570a9b4a6e186f188737bc92d94a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7"} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e2bddc7b16edf465bcfc2d34d035b074819570a9b4a6e186f188737bc92d94a"} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7"} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7"} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7"} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d"} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d"} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781cd9fcbb93adcede4cf64cc292877a9d3a756e8b4df0b67e9804625b35a8da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781cd9fcbb93adcede4cf64cc292877a9d3a756e8b4df0b67e9804625b35a8da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781cd9fcbb93adcede4cf64cc292877a9d3a756e8b4df0b67e9804625b35a8da"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781cd9fcbb93adcede4cf64cc292877a9d3a756e8b4df0b67e9804625b35a8da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781cd9fcbb93adcede4cf64cc292877a9d3a756e8b4df0b67e9804625b35a8da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781cd9fcbb93adcede4cf64cc292877a9d3a756e8b4df0b67e9804625b35a8da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781cd9fcbb93adcede4cf64cc292877a9d3a756e8b4df0b67e9804625b35a8da"} {"level":"info","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781cd9fcbb93adcede4cf64cc292877a9d3a756e8b4df0b67e9804625b35a8da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"} {"level":"info","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"} {"level":"debug","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"} {"level":"info","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"} {"level":"debug","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"} {"level":"info","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50616","PortSpecifier":{"PortValue":50616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","object":"source:{address:{socket_address:{address:\"10.132.0.11:50616\" port_value:50616}}} destination:{address:{socket_address:{address:\"10.133.0.47:443\" port_value:443}}} request:{time:{seconds:1785510812 nanos:566010931} http:{id:\"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"af885ff5ddf1fc50edc7db1cc5f31959f1443a78790360409fd867def4f8f2dd\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/637f0ccbdb3f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2aab371-c77d-42aa-a874-8b7c32fc73da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de9f77ec-82d2-4a61-be83-79afd0789585","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/637f0ccbdb3f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2aab371-c77d-42aa-a874-8b7c32fc73da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de9f77ec-82d2-4a61-be83-79afd0789585","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af885ff5ddf1fc50edc7db1cc5f31959f1443a78790360409fd867def4f8f2dd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdC02NzQ3OGNmNjhkLWp0cnp3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3"},"host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":566010931,"seconds":1785510812}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50616},"address":"10.132.0.11:50616"}}}}},"destination":{"address":"10.133.0.47:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"af885ff5ddf1fc50edc7db1cc5f31959f1443a78790360409fd867def4f8f2dd"},"headers":{":authority":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3"},"host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":566010931,"seconds":1785510812},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:50616","port":50616}}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b8ae9c9-fb13-48c7-bdb2-faecb88c28c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42068","PortSpecifier":{"PortValue":42068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cc42102-b24d-4208-b016-dc31cdefd247","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","object":"source:{address:{socket_address:{address:\"10.132.0.11:42068\" port_value:42068}}} destination:{address:{socket_address:{address:\"10.133.0.50:443\" port_value:443}}} request:{time:{seconds:1785510812 nanos:607587163} http:{id:\"7cc42102-b24d-4208-b016-dc31cdefd247\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-79a3ee.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi03OWEzZWUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTc5YTNlZS1vcGVuc2hpZnQtZGVmYXVsdC01YjU4Yjc4Y2ZiLWJ3dGx2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTc5YTNlZS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi03OWEzZWUtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.50~e2e-shared-b-79a3ee-openshift-default-5b58b78cfb-bwtlv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"7cc42102-b24d-4208-b016-dc31cdefd247\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"14bce808833d327ec203b3d0cb2c11582b464e328337572e0da1c5a5cd26a64f\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/637f0ccbdb3f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2aab371-c77d-42aa-a874-8b7c32fc73da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de9f77ec-82d2-4a61-be83-79afd0789585","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/637f0ccbdb3f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2aab371-c77d-42aa-a874-8b7c32fc73da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de9f77ec-82d2-4a61-be83-79afd0789585","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"14bce808833d327ec203b3d0cb2c11582b464e328337572e0da1c5a5cd26a64f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-79a3ee.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.50~e2e-shared-b-79a3ee-openshift-default-5b58b78cfb-bwtlv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7cc42102-b24d-4208-b016-dc31cdefd247"},"host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"7cc42102-b24d-4208-b016-dc31cdefd247","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":607587163,"seconds":1785510812}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42068},"address":"10.132.0.11:42068"}}}}},"destination":{"address":"10.133.0.50:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14bce808833d327ec203b3d0cb2c11582b464e328337572e0da1c5a5cd26a64f"},"headers":{":authority":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-79a3ee.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.50~e2e-shared-b-79a3ee-openshift-default-5b58b78cfb-bwtlv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7cc42102-b24d-4208-b016-dc31cdefd247"},"host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"7cc42102-b24d-4208-b016-dc31cdefd247","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":607587163,"seconds":1785510812},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:42068","port":42068}}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79a3ee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cc42102-b24d-4208-b016-dc31cdefd247","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50626","PortSpecifier":{"PortValue":50626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","method":"POST","path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","object":"source:{address:{socket_address:{address:\"10.132.0.11:50626\" port_value:50626}}} destination:{address:{socket_address:{address:\"10.133.0.47:443\" port_value:443}}} request:{time:{seconds:1785510812 nanos:650962285} http:{id:\"823e9a2d-bddd-4ff4-9eba-a2395fd806b1\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-9966b2-kserve-workload-svc.ai-tenant-e2e-shared-a-9966b2.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdC02NzQ3OGNmNjhkLWp0cnp3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"823e9a2d-bddd-4ff4-9eba-a2395fd806b1\"} path:\"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions\" host:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"96d174f79b58e49ad0cf5a15784dde00c477eeaef2b05ef7a8ba5b15bf3c8c8e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KDtS14pqnXfFZxNH_eXWf6aXN29oVCsOcfYQXmKc7eGDREwGUOPbPSwcpIHA"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"19f50961-461f-4e11-b3d6-03edd7837adb","keyName":"e2e-rate-a-121398","subscription":"e2e-rate-iso-a-121398","tenant":"e2e-shared-a-9966b2","userId":"19f50961-461f-4e11-b3d6-03edd7837adb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m","name":"rate-test-model-9966b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-121398","namespace":"ai-tenant-e2e-shared-a-9966b2","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2"}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-9966b2-kserve-workload-svc.ai-tenant-e2e-shared-a-9966b2.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdC02NzQ3OGNmNjhkLWp0cnp3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1"},"host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","method":"POST","path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":650962285,"seconds":1785510812}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50626},"address":"10.132.0.11:50626"}}}}},"destination":{"address":"10.133.0.47:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"96d174f79b58e49ad0cf5a15784dde00c477eeaef2b05ef7a8ba5b15bf3c8c8e"},"headers":{":authority":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-9966b2-kserve-workload-svc.ai-tenant-e2e-shared-a-9966b2.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1"},"host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","method":"POST","path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":650962285,"seconds":1785510812},"url_path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:50626","port":50626}}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-121398"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"19f50961-461f-4e11-b3d6-03edd7837adb","keyName":"e2e-rate-a-121398","selected_subscription":"e2e-rate-iso-a-121398","selected_subscription_key":"ai-tenant-e2e-shared-a-9966b2/e2e-rate-iso-a-121398@ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m","name":"rate-test-model-9966b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-121398","namespace":"ai-tenant-e2e-shared-a-9966b2","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"823e9a2d-bddd-4ff4-9eba-a2395fd806b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55274","PortSpecifier":{"PortValue":55274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","method":"POST","path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","object":"source:{address:{socket_address:{address:\"10.132.0.11:55274\" port_value:55274}}} destination:{address:{socket_address:{address:\"10.133.0.47:443\" port_value:443}}} request:{time:{seconds:1785510813 nanos:695160444} http:{id:\"0805a5cd-cf5d-46dc-b0d9-17183520fe41\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-9966b2-kserve-workload-svc.ai-tenant-e2e-shared-a-9966b2.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdC02NzQ3OGNmNjhkLWp0cnp3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"0805a5cd-cf5d-46dc-b0d9-17183520fe41\"} path:\"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions\" host:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"96d174f79b58e49ad0cf5a15784dde00c477eeaef2b05ef7a8ba5b15bf3c8c8e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KDtS14pqnXfFZxNH_eXWf6aXN29oVCsOcfYQXmKc7eGDREwGUOPbPSwcpIHA"} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"19f50961-461f-4e11-b3d6-03edd7837adb","keyName":"e2e-rate-a-121398","subscription":"e2e-rate-iso-a-121398","tenant":"e2e-shared-a-9966b2","userId":"19f50961-461f-4e11-b3d6-03edd7837adb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m","name":"rate-test-model-9966b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-121398","namespace":"ai-tenant-e2e-shared-a-9966b2","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2"}} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-9966b2-kserve-workload-svc.ai-tenant-e2e-shared-a-9966b2.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41"},"host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","method":"POST","path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":695160444,"seconds":1785510813}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55274},"address":"10.132.0.11:55274"}}}}},"destination":{"address":"10.133.0.47:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"96d174f79b58e49ad0cf5a15784dde00c477eeaef2b05ef7a8ba5b15bf3c8c8e"},"headers":{":authority":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-9966b2-kserve-workload-svc.ai-tenant-e2e-shared-a-9966b2.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdC02NzQ3OGNmNjhkLWp0cnp3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41"},"host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","method":"POST","path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":695160444,"seconds":1785510813},"url_path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:55274","port":55274}}} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-121398"} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"19f50961-461f-4e11-b3d6-03edd7837adb","keyName":"e2e-rate-a-121398","selected_subscription":"e2e-rate-iso-a-121398","selected_subscription_key":"ai-tenant-e2e-shared-a-9966b2/e2e-rate-iso-a-121398@ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m","name":"rate-test-model-9966b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-121398","namespace":"ai-tenant-e2e-shared-a-9966b2","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0805a5cd-cf5d-46dc-b0d9-17183520fe41","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55276","PortSpecifier":{"PortValue":55276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57635d54-fb46-4727-981a-8f9ea4202d69","method":"POST","path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","object":"source:{address:{socket_address:{address:\"10.132.0.11:55276\" port_value:55276}}} destination:{address:{socket_address:{address:\"10.133.0.47:443\" port_value:443}}} request:{time:{seconds:1785510814 nanos:735973104} http:{id:\"57635d54-fb46-4727-981a-8f9ea4202d69\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-9966b2-kserve-workload-svc.ai-tenant-e2e-shared-a-9966b2.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdC02NzQ3OGNmNjhkLWp0cnp3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"57635d54-fb46-4727-981a-8f9ea4202d69\"} path:\"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions\" host:\"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"96d174f79b58e49ad0cf5a15784dde00c477eeaef2b05ef7a8ba5b15bf3c8c8e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KDtS14pqnXfFZxNH_eXWf6aXN29oVCsOcfYQXmKc7eGDREwGUOPbPSwcpIHA"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"19f50961-461f-4e11-b3d6-03edd7837adb","keyName":"e2e-rate-a-121398","subscription":"e2e-rate-iso-a-121398","tenant":"e2e-shared-a-9966b2","userId":"19f50961-461f-4e11-b3d6-03edd7837adb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9966b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m","name":"rate-test-model-9966b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-121398","namespace":"ai-tenant-e2e-shared-a-9966b2","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2"}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-9966b2-kserve-workload-svc.ai-tenant-e2e-shared-a-9966b2.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdC02NzQ3OGNmNjhkLWp0cnp3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTk5NjZiMi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05OTY2YjItb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"57635d54-fb46-4727-981a-8f9ea4202d69"},"host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"57635d54-fb46-4727-981a-8f9ea4202d69","method":"POST","path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":735973104,"seconds":1785510814}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55276},"address":"10.132.0.11:55276"}}}}},"destination":{"address":"10.133.0.47:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"96d174f79b58e49ad0cf5a15784dde00c477eeaef2b05ef7a8ba5b15bf3c8c8e"},"headers":{":authority":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-9966b2-kserve-workload-svc.ai-tenant-e2e-shared-a-9966b2.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.47~e2e-shared-a-9966b2-openshift-default-67478cf68d-jtrzw.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"57635d54-fb46-4727-981a-8f9ea4202d69"},"host":"e2e-shared-a-9966b2.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"57635d54-fb46-4727-981a-8f9ea4202d69","method":"POST","path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":735973104,"seconds":1785510814},"url_path":"/ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:55276","port":55276}}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-121398"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"19f50961-461f-4e11-b3d6-03edd7837adb","keyName":"e2e-rate-a-121398","selected_subscription":"e2e-rate-iso-a-121398","selected_subscription_key":"ai-tenant-e2e-shared-a-9966b2/e2e-rate-iso-a-121398@ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9966b2/models/facebook/opt-125m","name":"rate-test-model-9966b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-121398","namespace":"ai-tenant-e2e-shared-a-9966b2","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9966b2/rate-test-model-9966b2"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57635d54-fb46-4727-981a-8f9ea4202d69","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32872","PortSpecifier":{"PortValue":32872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","method":"POST","path":"/ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee/v1/completions","host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","object":"source:{address:{socket_address:{address:\"10.132.0.11:32872\" port_value:32872}}} destination:{address:{socket_address:{address:\"10.133.0.50:443\" port_value:443}}} request:{time:{seconds:1785510814 nanos:773482375} http:{id:\"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-79a3ee-kserve-workload-svc.ai-tenant-e2e-shared-b-79a3ee.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.50~e2e-shared-b-79a3ee-openshift-default-5b58b78cfb-bwtlv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a\"} path:\"/ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee/v1/completions\" host:\"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JI8c53M0ZoetWvKX_9jVeBCbPZUAVmlDkfbrkqdCINY6AHEJH8WYlWInBGBx"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-79a3ee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-79a3ee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da72b2dc-001c-4f3f-9ed4-9742aee2a8ee","keyName":"e2e-rate-b-121398","subscription":"e2e-rate-iso-b-121398","tenant":"e2e-shared-b-79a3ee","userId":"da72b2dc-001c-4f3f-9ed4-9742aee2a8ee","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-79a3ee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-79a3ee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-79a3ee/models/facebook/opt-125m","name":"rate-test-model-79a3ee","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-121398","namespace":"ai-tenant-e2e-shared-b-79a3ee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee"}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-79a3ee-kserve-workload-svc.ai-tenant-e2e-shared-b-79a3ee.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.50~e2e-shared-b-79a3ee-openshift-default-5b58b78cfb-bwtlv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a"},"host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","method":"POST","path":"/ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":773482375,"seconds":1785510814}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":32872},"address":"10.132.0.11:32872"}}}}},"destination":{"address":"10.133.0.50:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc"},"headers":{":authority":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-79a3ee-kserve-workload-svc.ai-tenant-e2e-shared-b-79a3ee.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.50~e2e-shared-b-79a3ee-openshift-default-5b58b78cfb-bwtlv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a"},"host":"e2e-shared-b-79a3ee.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","method":"POST","path":"/ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":773482375,"seconds":1785510814},"url_path":"/ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:32872","port":32872}}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-79a3ee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-121398"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da72b2dc-001c-4f3f-9ed4-9742aee2a8ee","keyName":"e2e-rate-b-121398","selected_subscription":"e2e-rate-iso-b-121398","selected_subscription_key":"ai-tenant-e2e-shared-b-79a3ee/e2e-rate-iso-b-121398@ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-79a3ee/models/facebook/opt-125m","name":"rate-test-model-79a3ee","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-121398","namespace":"ai-tenant-e2e-shared-b-79a3ee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-79a3ee/rate-test-model-79a3ee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:13:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1159d2bc-ff13-49f2-bb10-e5bcb5cd0c7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c203d25b158e8d0a559cca25b805ac8166f5d47ace986e194d7450ef11277b1"} {"level":"info","ts":"2026-07-31T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d731b0f88d8f89805e6cafee2dd31446453ba0b59867a09bfafacfe2e11bd02"} {"level":"info","ts":"2026-07-31T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af885ff5ddf1fc50edc7db1cc5f31959f1443a78790360409fd867def4f8f2dd"} {"level":"info","ts":"2026-07-31T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9b6c6a34072b7f2f49b2743f58d0c16a97ed471740b937e08d66629b2f2101b"} {"level":"info","ts":"2026-07-31T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7fce9b892b58a19c804718cdd8c83e0e8ed21479c2ad3872e30aa03c6fc92c8"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fc709d60213ab42ad1da9c2996a23c75e14614d4fc51595b96c79e0c69e432c"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a035037b8519f5cd6c722c5715fce8dba9b6c0afbbdf0cf3e1ad596e0f8f8fc"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab3fb110f49da16b4f808b0464b1b32e3a1e9f06722c70d12a3098bf52c4eeec"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab9293fe65d97abf8ec8e684d664c2f6507949e74e63ab21001f8b1032306c4d"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88e96b4c78a805a7afdb96b02b92a4056e05dd244f321dc9e9c29dfcd7941519"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ae5b0fa5cff511e82086a9b615c8399e7b8e9907c72654951e91c4b05529926"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7fc570f9230b42e0eea0168d1a8c04fe7f8901a594fb84bd0dc777466fcaaf7"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c03f70ae8e4869f2a598e4048747bcfb24bd6bb409119948bdf123c540484b44"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e2bddc7b16edf465bcfc2d34d035b074819570a9b4a6e186f188737bc92d94a"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/781cd9fcbb93adcede4cf64cc292877a9d3a756e8b4df0b67e9804625b35a8da"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a889eb5a3d9decf8660b2f0cc4b5dd6a63feb262e993d5bc1590214054c47d7"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c15f21f6b0dab1e62974758801b8f73b6b5fbf6690b236ca4d29e39b3801526"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7935e1e6b9acced4f46e02b29c0c5c8c738fe601626b9b4c793e23d30569be7c"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b0b8f85bf1dd314fd9b0f960bb472436535c9edc6a03ad38213f70fd1930bae"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/123edf3c7cdb6abfcd491d505b252ef75ada837bdf818e07c30b8d26b2131107"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/617ca0bcd217af7c98dd916340ca6204834d888a62a9e9ea3f3d6f73a578f223"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d832fb2fa098ebd12514aca003b4950d830aa3cada9042cb9931b504ea5da598"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96d174f79b58e49ad0cf5a15784dde00c477eeaef2b05ef7a8ba5b15bf3c8c8e"} {"level":"info","ts":"2026-07-31T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14bce808833d327ec203b3d0cb2c11582b464e328337572e0da1c5a5cd26a64f"} {"level":"info","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33214","PortSpecifier":{"PortValue":33214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6a032eb-9285-40bf-9a01-9110a13377d5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","object":"source:{address:{socket_address:{address:\"10.132.0.11:33214\" port_value:33214}}} destination:{address:{socket_address:{address:\"10.134.0.46:443\" port_value:443}}} request:{time:{seconds:1785510899 nanos:491367846} http:{id:\"f6a032eb-9285-40bf-9a01-9110a13377d5\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.46~maas-default-gateway-openshift-default-5ccb968c66-x79gg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f6a032eb-9285-40bf-9a01-9110a13377d5\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/637f0ccbdb3f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2aab371-c77d-42aa-a874-8b7c32fc73da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de9f77ec-82d2-4a61-be83-79afd0789585","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/637f0ccbdb3f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2aab371-c77d-42aa-a874-8b7c32fc73da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de9f77ec-82d2-4a61-be83-79afd0789585","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.46~maas-default-gateway-openshift-default-5ccb968c66-x79gg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f6a032eb-9285-40bf-9a01-9110a13377d5"},"host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"f6a032eb-9285-40bf-9a01-9110a13377d5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":491367846,"seconds":1785510899}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33214},"address":"10.132.0.11:33214"}}}}},"destination":{"address":"10.134.0.46:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.46~maas-default-gateway-openshift-default-5ccb968c66-x79gg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f6a032eb-9285-40bf-9a01-9110a13377d5"},"host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"f6a032eb-9285-40bf-9a01-9110a13377d5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":491367846,"seconds":1785510899},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:33214","port":33214}}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a032eb-9285-40bf-9a01-9110a13377d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33228","PortSpecifier":{"PortValue":33228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90c9220b-b163-4c88-b72c-cb28e4184dee","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","object":"source:{address:{socket_address:{address:\"10.132.0.11:33228\" port_value:33228}}} destination:{address:{socket_address:{address:\"10.134.0.46:443\" port_value:443}}} request:{time:{seconds:1785510899 nanos:546782086} http:{id:\"90c9220b-b163-4c88-b72c-cb28e4184dee\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.46~maas-default-gateway-openshift-default-5ccb968c66-x79gg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"90c9220b-b163-4c88-b72c-cb28e4184dee\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HlhfGGsvs5SuxvM0_GsqNgS3PuRP9FE69vg51X1F370dkSbESxHmfwryQOvQ"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3c10f6a5-718d-4749-a04c-f9cfe4c51452","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"3c10f6a5-718d-4749-a04c-f9cfe4c51452","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.46~maas-default-gateway-openshift-default-5ccb968c66-x79gg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"90c9220b-b163-4c88-b72c-cb28e4184dee"},"host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"90c9220b-b163-4c88-b72c-cb28e4184dee","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":546782086,"seconds":1785510899}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33228},"address":"10.132.0.11:33228"}}}}},"destination":{"address":"10.134.0.46:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.46~maas-default-gateway-openshift-default-5ccb968c66-x79gg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"90c9220b-b163-4c88-b72c-cb28e4184dee"},"host":"maas.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"90c9220b-b163-4c88-b72c-cb28e4184dee","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":546782086,"seconds":1785510899},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:33228","port":33228}}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3c10f6a5-718d-4749-a04c-f9cfe4c51452","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90c9220b-b163-4c88-b72c-cb28e4184dee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3"} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3"} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb"} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e"} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab"} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab"} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab"} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"} {"level":"info","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4"} {"level":"error","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f"} {"level":"error","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T15:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T15:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"info","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48840","PortSpecifier":{"PortValue":48840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","object":"source:{address:{socket_address:{address:\"10.132.0.11:48840\" port_value:48840}}} destination:{address:{socket_address:{address:\"10.133.0.51:443\" port_value:443}}} request:{time:{seconds:1785510937 nanos:244112476} http:{id:\"32a3630f-2bc2-4433-9e15-46431d9ff9ab\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-58af04.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01OGFmMDQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CjwKBE5BTUUSNBoyZTJlLWlwcC1hLTU4YWYwNC1vcGVuc2hpZnQtZGVmYXVsdC1kNmQ1OWY5ZmQtbTV2MnYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnAKBU9XTkVSEmcaZWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtaXBwLWEtNThhZjA0LW9wZW5zaGlmdC1kZWZhdWx0CjUKDVdPUktMT0FEX05BTUUSJBoiZTJlLWlwcC1hLTU4YWYwNC1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.51~e2e-ipp-a-58af04-openshift-default-d6d59f9fd-m5v2v.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"32a3630f-2bc2-4433-9e15-46431d9ff9ab\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/637f0ccbdb3f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2aab371-c77d-42aa-a874-8b7c32fc73da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de9f77ec-82d2-4a61-be83-79afd0789585","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/637f0ccbdb3f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2aab371-c77d-42aa-a874-8b7c32fc73da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de9f77ec-82d2-4a61-be83-79afd0789585","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-58af04.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.51~e2e-ipp-a-58af04-openshift-default-d6d59f9fd-m5v2v.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab"},"host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":244112476,"seconds":1785510937}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":48840},"address":"10.132.0.11:48840"}}}}},"destination":{"address":"10.133.0.51:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159"},"headers":{":authority":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-58af04.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01OGFmMDQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CjwKBE5BTUUSNBoyZTJlLWlwcC1hLTU4YWYwNC1vcGVuc2hpZnQtZGVmYXVsdC1kNmQ1OWY5ZmQtbTV2MnYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnAKBU9XTkVSEmcaZWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtaXBwLWEtNThhZjA0LW9wZW5zaGlmdC1kZWZhdWx0CjUKDVdPUktMT0FEX05BTUUSJBoiZTJlLWlwcC1hLTU4YWYwNC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.51~e2e-ipp-a-58af04-openshift-default-d6d59f9fd-m5v2v.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab"},"host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":244112476,"seconds":1785510937},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:48840","port":48840}}} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-58af04/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:15:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32a3630f-2bc2-4433-9e15-46431d9ff9ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48846","PortSpecifier":{"PortValue":48846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83811acf-4aa3-4860-a1a3-d8a560965524","method":"POST","path":"/ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04/v1/chat/completions","host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","object":"source:{address:{socket_address:{address:\"10.132.0.11:48846\" port_value:48846}}} destination:{address:{socket_address:{address:\"10.133.0.51:443\" port_value:443}}} request:{time:{seconds:1785510939 nanos:304083135} http:{id:\"83811acf-4aa3-4860-a1a3-d8a560965524\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-58af04-kserve-workload-svc.ai-tenant-e2e-ipp-a-58af04.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.51~e2e-ipp-a-58af04-openshift-default-d6d59f9fd-m5v2v.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"83811acf-4aa3-4860-a1a3-d8a560965524\"} path:\"/ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04/v1/chat/completions\" host:\"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w7XyxxxD82MD8bZD_ktpB539vy1nqapz8lTP1jlL10ZeHlNe9CTs1LGg0ok9"} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-58af04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-58af04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"375710ac-7538-4c94-9357-a53cf408862f","keyName":"e2e-ipp-58af04","subscription":"ipp-route-58af04-sub","tenant":"e2e-ipp-a-58af04","userId":"375710ac-7538-4c94-9357-a53cf408862f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-58af04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-58af04.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-58af04/models/facebook/opt-125m","name":"ipp-route-58af04","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-58af04-sub","namespace":"ai-tenant-e2e-ipp-a-58af04","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04"}} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-58af04-kserve-workload-svc.ai-tenant-e2e-ipp-a-58af04.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.51~e2e-ipp-a-58af04-openshift-default-d6d59f9fd-m5v2v.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"83811acf-4aa3-4860-a1a3-d8a560965524"},"host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"83811acf-4aa3-4860-a1a3-d8a560965524","method":"POST","path":"/ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":304083135,"seconds":1785510939}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":48846},"address":"10.132.0.11:48846"}}}}},"destination":{"address":"10.133.0.51:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e"},"headers":{":authority":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-58af04-kserve-workload-svc.ai-tenant-e2e-ipp-a-58af04.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.51~e2e-ipp-a-58af04-openshift-default-d6d59f9fd-m5v2v.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.11","x-forwarded-host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"83811acf-4aa3-4860-a1a3-d8a560965524"},"host":"e2e-ipp-a-58af04.apps.9ac14b5e-73b6-4e5b-aaa4-637f0ccbdb3f.prod.konfluxeaas.com","id":"83811acf-4aa3-4860-a1a3-d8a560965524","method":"POST","path":"/ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":304083135,"seconds":1785510939},"url_path":"/ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:48846","port":48846}}} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-58af04/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-58af04-sub"} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"375710ac-7538-4c94-9357-a53cf408862f","keyName":"e2e-ipp-58af04","selected_subscription":"ipp-route-58af04-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04-sub@ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-58af04/models/facebook/opt-125m","name":"ipp-route-58af04","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-58af04-sub","namespace":"ai-tenant-e2e-ipp-a-58af04","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-58af04/ipp-route-58af04"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T15:15:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83811acf-4aa3-4860-a1a3-d8a560965524","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b3cbd7ed130b6328361edb2cd9b867a12af89b1afaba6ad7451a8dfb9022b2a"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df9094ea0c127ac88cdfe53a7b69e2792a79bdc9db4c72c0192869d785f5a2ab"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/835df07b9dc8388784f083c98a9a04715a1de4338bff50be35aa7ee7e10b37bb"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/678ca611417b162ad59af0d3d9d69c33cd7a3df2ecc9ea708b47dcf9a0467159"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e70b1fc57bf164427d04f31fd79c83fc8b3f7ecd9728bec2823ebf019fd88ea"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8e8d971a675a808988c59827d46f56e65d0c0470d5a6f535817eee813a824c3"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86bae8798e90a26a9956a880c6cff90d579334a0aa2a3da847e4b6694a969add"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cec59bd93fecd532d6bc0b37638214d3bc709bbe0e81c90a3b6559f1111e0ceb"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bc1556387e6bf7ae463c4b86b5c5f8f981d4c6e5bc2987154bc495a03228ad4"} {"level":"info","ts":"2026-07-31T15:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8caa07f378413d45089d783d8857075d623d6aa81b4a4571c02b25e393e7b21e"} {"level":"info","ts":"2026-07-31T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c317e94256d4e73939ec1f547803efe54f180089864d981746383cdc184ad26f"} {"level":"info","ts":"2026-07-31T15:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf981af1e86307d504d6843203e053cd1605cf0e8db1cf0ca170aa0c1e328b71"}