{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea"}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48946093f38dffd63659830014073da144f04800fb67af53449240334085e947"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48946093f38dffd63659830014073da144f04800fb67af53449240334085e947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48946093f38dffd63659830014073da144f04800fb67af53449240334085e947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48946093f38dffd63659830014073da144f04800fb67af53449240334085e947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48946093f38dffd63659830014073da144f04800fb67af53449240334085e947"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48946093f38dffd63659830014073da144f04800fb67af53449240334085e947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T03:22:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"error","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T03:22:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47800","PortSpecifier":{"PortValue":47800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47800","PortSpecifier":{"PortValue":47800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344954,"nanos":429564899},"http":{"id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70091c69-58e2-49d8-a4f6-a88fe90b0a56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:41338","PortSpecifier":{"PortValue":41338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47163852-ea1f-4692-b7c6-ee784691e5eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:41338","PortSpecifier":{"PortValue":41338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344954,"nanos":470263850},"http":{"id":"47163852-ea1f-4692-b7c6-ee784691e5eb","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47163852-ea1f-4692-b7c6-ee784691e5eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47804","PortSpecifier":{"PortValue":47804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"022d528e-9993-43d7-a6eb-68a038179cf2","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47804","PortSpecifier":{"PortValue":47804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344954,"nanos":509763424},"http":{"id":"022d528e-9993-43d7-a6eb-68a038179cf2","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"022d528e-9993-43d7-a6eb-68a038179cf2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47814","PortSpecifier":{"PortValue":47814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:47814","PortSpecifier":{"PortValue":47814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344955,"nanos":572687558},"http":{"id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5790abdc-2ff6-41c0-9c7d-ee335be02200","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32814","PortSpecifier":{"PortValue":32814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32814","PortSpecifier":{"PortValue":32814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344956,"nanos":614817641},"http":{"id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e1583e-4bf5-4b21-964c-6b8e5c08e6af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79c9d972-4236-46c1-820d-129f22f046d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32820","PortSpecifier":{"PortValue":32820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79c9d972-4236-46c1-820d-129f22f046d4","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79c9d972-4236-46c1-820d-129f22f046d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32820","PortSpecifier":{"PortValue":32820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344957,"nanos":655666021},"http":{"id":"79c9d972-4236-46c1-820d-129f22f046d4","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79c9d972-4236-46c1-820d-129f22f046d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79c9d972-4236-46c1-820d-129f22f046d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79c9d972-4236-46c1-820d-129f22f046d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79c9d972-4236-46c1-820d-129f22f046d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32822","PortSpecifier":{"PortValue":32822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32822","PortSpecifier":{"PortValue":32822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344958,"nanos":695127378},"http":{"id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00ab66f3-0ddd-46db-9641-17fbe20e54ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32832","PortSpecifier":{"PortValue":32832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32832","PortSpecifier":{"PortValue":32832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344959,"nanos":733101696},"http":{"id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc8c97c5-1a81-4516-a46b-5b6ccbe54861","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32846","PortSpecifier":{"PortValue":32846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32846","PortSpecifier":{"PortValue":32846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344960,"nanos":770445005},"http":{"id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a462e61d-72f0-4df8-9e8b-6150e4e529de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32850","PortSpecifier":{"PortValue":32850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:32850","PortSpecifier":{"PortValue":32850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344961,"nanos":814523815},"http":{"id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dblp7xZz4hG8YRXY_GvWtevR3QwjMt3XF0po3euKJs3ATAlWxDJT4KBbc1iV\"}"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","subscription":"e2e-rate-iso-a-7802b8","tenant":"e2e-shared-a-e88910","userId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-7802b8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7802b8"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"272cdb1b-6488-4e70-b478-a0d938eec9ff","keyName":"e2e-rate-a-7802b8","selected_subscription":"e2e-rate-iso-a-7802b8","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-7802b8@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7802b8","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daf2708f-ece7-4465-837c-c1ce4b7455d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55042","PortSpecifier":{"PortValue":55042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55042","PortSpecifier":{"PortValue":55042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344970,"nanos":459200668},"http":{"id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47023e0-b0fe-4c79-b70d-0c5f506e4bdc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1586516e-0759-4eed-966c-7307d866c4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39542","PortSpecifier":{"PortValue":39542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1586516e-0759-4eed-966c-7307d866c4e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1586516e-0759-4eed-966c-7307d866c4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39542","PortSpecifier":{"PortValue":39542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344970,"nanos":499089190},"http":{"id":"1586516e-0759-4eed-966c-7307d866c4e2","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1586516e-0759-4eed-966c-7307d866c4e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e69198-d892-47bd-b78c-a26d385132f9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"]}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1586516e-0759-4eed-966c-7307d866c4e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14b5fb251e48"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=81b30c1f-64a8-4d71-80c8-847123857ad4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e69198-d892-47bd-b78c-a26d385132f9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1586516e-0759-4eed-966c-7307d866c4e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1586516e-0759-4eed-966c-7307d866c4e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1586516e-0759-4eed-966c-7307d866c4e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72df85c4-17ec-4072-87f2-48239517d504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55048","PortSpecifier":{"PortValue":55048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72df85c4-17ec-4072-87f2-48239517d504","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72df85c4-17ec-4072-87f2-48239517d504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55048","PortSpecifier":{"PortValue":55048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344970,"nanos":538247336},"http":{"id":"72df85c4-17ec-4072-87f2-48239517d504","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1\"}"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","subscription":"e2e-rate-iso-a-19cf6a","tenant":"e2e-shared-a-e88910","userId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-19cf6a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72df85c4-17ec-4072-87f2-48239517d504","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19cf6a"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72df85c4-17ec-4072-87f2-48239517d504","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","selected_subscription":"e2e-rate-iso-a-19cf6a","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-19cf6a@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72df85c4-17ec-4072-87f2-48239517d504","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72df85c4-17ec-4072-87f2-48239517d504","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55054","PortSpecifier":{"PortValue":55054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55054","PortSpecifier":{"PortValue":55054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344971,"nanos":575392436},"http":{"id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1\"}"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","subscription":"e2e-rate-iso-a-19cf6a","tenant":"e2e-shared-a-e88910","userId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-19cf6a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19cf6a"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","selected_subscription":"e2e-rate-iso-a-19cf6a","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-19cf6a@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95c53d2a-ae3d-4c3a-afce-8cfb9d82207a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55060","PortSpecifier":{"PortValue":55060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","method":"POST","path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions","host":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:55060","PortSpecifier":{"PortValue":55060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344972,"nanos":617353476},"http":{"id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","method":"POST","headers":{":authority":"e2e-shared-a-e88910.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uloT9f4mlzCP41jk_tkNCae64D69AbOCSDXnWuQdOpqzjOWehbBTaZ7WADQ1\"}"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","subscription":"e2e-rate-iso-a-19cf6a","tenant":"e2e-shared-a-e88910","userId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\",\"requestedSubscription\":\"e2e-rate-iso-a-19cf6a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e88910.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e88910/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19cf6a"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be74c620-631a-46c9-9a15-dfdc0e0e715a","keyName":"e2e-rate-a-19cf6a","selected_subscription":"e2e-rate-iso-a-19cf6a","selected_subscription_key":"ai-tenant-e2e-shared-a-e88910/e2e-rate-iso-a-19cf6a@ai-tenant-e2e-shared-a-e88910/rate-test-model-e88910","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e88910","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19cf6a","namespace":"ai-tenant-e2e-shared-a-e88910","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f68407c2-4ed9-4fcc-af4e-6e778fb708cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39548","PortSpecifier":{"PortValue":39548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","method":"POST","path":"/ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd/v1/completions","host":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.20:39548","PortSpecifier":{"PortValue":39548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784344972,"nanos":657016299},"http":{"id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","method":"POST","headers":{":authority":"e2e-shared-b-b50cfd.apps.59f7ef4f-fa21-40bf-90df-14b5fb251e48.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UVvyz1G8xhvA4tML_YvoaMNTlsayT8X4ecc3DmGh6dKYybMSJj8uNiOhT3Gv"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UVvyz1G8xhvA4tML_YvoaMNTlsayT8X4ecc3DmGh6dKYybMSJj8uNiOhT3Gv\"}"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"41050b4c-faad-4270-bc13-34ae4288ee3b","keyName":"e2e-rate-b-19cf6a","subscription":"e2e-rate-iso-b-19cf6a","tenant":"e2e-shared-b-b50cfd","userId":"41050b4c-faad-4270-bc13-34ae4288ee3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd\",\"requestedSubscription\":\"e2e-rate-iso-b-19cf6a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b50cfd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b50cfd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-19cf6a","namespace":"ai-tenant-e2e-shared-b-b50cfd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b50cfd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-19cf6a"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"41050b4c-faad-4270-bc13-34ae4288ee3b","keyName":"e2e-rate-b-19cf6a","selected_subscription":"e2e-rate-iso-b-19cf6a","selected_subscription_key":"ai-tenant-e2e-shared-b-b50cfd/e2e-rate-iso-b-19cf6a@ai-tenant-e2e-shared-b-b50cfd/rate-test-model-b50cfd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b50cfd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-19cf6a","namespace":"ai-tenant-e2e-shared-b-b50cfd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T03:22:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a9b78aa-51a4-4636-9b90-73bc6deb4b23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T03:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48946093f38dffd63659830014073da144f04800fb67af53449240334085e947"}
{"level":"info","ts":"2026-07-18T03:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8889e95440a34455b258d0ae1bdf4cf342e025c6edbdfa5563dde7197e1ce3a8"}
{"level":"info","ts":"2026-07-18T03:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/065ba6e38bd097513f7123e777e65402f33127ea1b5b7ee8dad169646f1c2aac"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cf8d9986bda07b8bfdffa7cc8ed674793266e1023d48d26d175ae1756ad5a1c"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e133ebf652b30ce2e522e0e27cd39612f6695d2ae93bad09e54c6f0f0046e6f"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ffc0292d125e425c62f49f02c517cde252dd77a88fffa55edbf58b2726986a3"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76346a6b88caece389b624003aab13b3de8e0e2c9e2e656665ce151a13bd0f53"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c64beee1a643c44144f9c8416a5abb24497fe5bb0d1e9a524abfff93a11adef"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fad70ff5e68687206909158db053d776f90c58e88b2dca37201025bd8d0638d8"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4696e30cb5612bb2629fca386cf51f59a142695b3af56c141aa83c056624657b"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603f43a783b8a106e59c08c43bf57b789ca82894eb36d4c4cea44f6f4830bea9"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbcb774aea583605a18aac373e120788f55c8605da436e5a6c8aa1e4108d9b13"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca1362b5a2132e9d221b2ab787034f80a6e6f33832b0a84c46fd8c3cb56a2fea"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c101c131722df3e924ea3c186bd29946c150e06e527afb66850b085327f258ba"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c43c3c20d1ed6bcfefc6ef9f6691f5ff59091c3556a37192360fbc1c75748655"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a631cacb96cf3ee6da072000251d54fa1ab1f43d7fcd99d57471eb6d9e73418f"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c1137998b10097269335aceea5527a0656f1d4cc9f9fa396fb0ff242461334e"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c6a4bbe177b76bda7d3cf3ed5fe051dc2e17b6a987f17dad1779fc1f98c0e04"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c316ecf4c17dd0fadd267f0bec166564a660bfb0057dc069201d7faacf883b"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25a6b24c1c8bcdf09a1e4b31ced9bb131a188d26fb585a3d5b1e62fb5c28df53"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f951a0a8c5869dc7a215fb44e789f8c63d18bbb7b13df192b5f0774a6ddacf"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52c23fe1901b5093e79a321a5586a6787f4a0e66a4c344007880fba4c3ae5111"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ea81bc06e4f4275ab4d2c3cc1ce5253967bef030b2e21218d2deaa3350092ab"}
{"level":"info","ts":"2026-07-18T03:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b479126ce58d87b3279f5acb00482bc240666cca08027a220da7005bb35b02fb"}