{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1d40704d0bab10ec4cdcd75600717cbb51295fca76a2396856daf03239cf2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86162ad661f0c29b175a6a5b77d2d9007f5f8659bf159e9643fca74d15eda652","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"}
{"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:18:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:18:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"}
{"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51326","PortSpecifier":{"PortValue":51326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51326","PortSpecifier":{"PortValue":51326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237545,"nanos":331103968},"http":{"id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dbed5d3-c63a-4c42-b46f-b11ecba071f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41670","PortSpecifier":{"PortValue":41670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41670","PortSpecifier":{"PortValue":41670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237545,"nanos":381375238},"http":{"id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03cba8d7-73c2-418b-988c-b4d93b8ba082","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51330","PortSpecifier":{"PortValue":51330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51330","PortSpecifier":{"PortValue":51330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237545,"nanos":457467595},"http":{"id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm\"}"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","subscription":"e2e-rate-iso-a-b1d7a1","tenant":"e2e-shared-a-4cda06","userId":"b47e18e1-6906-4e33-abe7-2246017b23f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d7a1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d7a1"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","selected_subscription":"e2e-rate-iso-a-b1d7a1","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d7a1@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a3cb9bf-517d-4346-b41d-1afee8ed1de7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51340","PortSpecifier":{"PortValue":51340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fc08189-3a97-4669-8a83-ada3d28b3720","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51340","PortSpecifier":{"PortValue":51340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237546,"nanos":555137794},"http":{"id":"6fc08189-3a97-4669-8a83-ada3d28b3720","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm"}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm\"}"}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","subscription":"e2e-rate-iso-a-b1d7a1","tenant":"e2e-shared-a-4cda06","userId":"b47e18e1-6906-4e33-abe7-2246017b23f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d7a1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d7a1"}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","selected_subscription":"e2e-rate-iso-a-b1d7a1","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d7a1@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fc08189-3a97-4669-8a83-ada3d28b3720","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51356","PortSpecifier":{"PortValue":51356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51356","PortSpecifier":{"PortValue":51356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237547,"nanos":597667005},"http":{"id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm"}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gxM0isQea28klxUb_EjtVLOIV8ItwuHL3VepOeQMfQV39yWxBuZK3j17zHQm\"}"}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","subscription":"e2e-rate-iso-a-b1d7a1","tenant":"e2e-shared-a-4cda06","userId":"b47e18e1-6906-4e33-abe7-2246017b23f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d7a1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d7a1"}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b47e18e1-6906-4e33-abe7-2246017b23f9","keyName":"e2e-rate-a-b1d7a1","selected_subscription":"e2e-rate-iso-a-b1d7a1","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d7a1@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d7a1","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d57935ed-a8b4-44e1-b3a2-5db8ff5ae0ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56602","PortSpecifier":{"PortValue":56602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce75cce9-5a62-4633-ba27-86c3ad339684","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56602","PortSpecifier":{"PortValue":56602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237567,"nanos":449652295},"http":{"id":"ce75cce9-5a62-4633-ba27-86c3ad339684","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce75cce9-5a62-4633-ba27-86c3ad339684","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54814","PortSpecifier":{"PortValue":54814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54814","PortSpecifier":{"PortValue":54814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237567,"nanos":485661078},"http":{"id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed6e7217-0f42-483e-b5df-ff9889c840f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56618","PortSpecifier":{"PortValue":56618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56618","PortSpecifier":{"PortValue":56618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237567,"nanos":529879280},"http":{"id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm\"}"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","subscription":"e2e-rate-iso-a-b1d8e7","tenant":"e2e-shared-a-4cda06","userId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d8e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d8e7"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","selected_subscription":"e2e-rate-iso-a-b1d8e7","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d8e7@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e278e50-31b1-46d0-bbc5-bfbde5472e5f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56620","PortSpecifier":{"PortValue":56620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b400c15-8caa-4b05-843d-28c914cb8fda","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56620","PortSpecifier":{"PortValue":56620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237568,"nanos":577324856},"http":{"id":"2b400c15-8caa-4b05-843d-28c914cb8fda","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm"}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm\"}"}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","subscription":"e2e-rate-iso-a-b1d8e7","tenant":"e2e-shared-a-4cda06","userId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d8e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d8e7"}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","selected_subscription":"e2e-rate-iso-a-b1d8e7","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d8e7@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b400c15-8caa-4b05-843d-28c914cb8fda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56632","PortSpecifier":{"PortValue":56632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","method":"POST","path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions","host":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56632","PortSpecifier":{"PortValue":56632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237569,"nanos":618188830},"http":{"id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","method":"POST","headers":{":authority":"e2e-shared-a-4cda06.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Vgrt4nmua47smEU4_BQ9b4xyB0NbLxNaUJ6YOY7Vxd8PihFOzw6fA7a3MvQm\"}"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","subscription":"e2e-rate-iso-a-b1d8e7","tenant":"e2e-shared-a-4cda06","userId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\",\"requestedSubscription\":\"e2e-rate-iso-a-b1d8e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4cda06.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b1d8e7"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ebd25b10-30a0-460c-a2e2-f109758d4e5f","keyName":"e2e-rate-a-b1d8e7","selected_subscription":"e2e-rate-iso-a-b1d8e7","selected_subscription_key":"ai-tenant-e2e-shared-a-4cda06/e2e-rate-iso-a-b1d8e7@ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-4cda06/models/facebook/opt-125m","name":"rate-test-model-4cda06","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b1d8e7","namespace":"ai-tenant-e2e-shared-a-4cda06","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-4cda06/rate-test-model-4cda06"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c15b77c7-4493-419d-89a3-2d4a39fd763c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54816","PortSpecifier":{"PortValue":54816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","method":"POST","path":"/ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc/v1/completions","host":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54816","PortSpecifier":{"PortValue":54816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237569,"nanos":656861644},"http":{"id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","method":"POST","headers":{":authority":"e2e-shared-b-683bdc.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OufmJPuK8lEG171s_xBnqFrfxdJGkcjUyK7hYMeK4k5dYKTvOalooXeiXNFv"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OufmJPuK8lEG171s_xBnqFrfxdJGkcjUyK7hYMeK4k5dYKTvOalooXeiXNFv\"}"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa63bd79-4228-4ade-bab6-f489d92d9530","keyName":"e2e-rate-b-b1d8e7","subscription":"e2e-rate-iso-b-b1d8e7","tenant":"e2e-shared-b-683bdc","userId":"aa63bd79-4228-4ade-bab6-f489d92d9530","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc\",\"requestedSubscription\":\"e2e-rate-iso-b-b1d8e7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-683bdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m","name":"rate-test-model-683bdc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b1d8e7","namespace":"ai-tenant-e2e-shared-b-683bdc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc"}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b1d8e7"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aa63bd79-4228-4ade-bab6-f489d92d9530","keyName":"e2e-rate-b-b1d8e7","selected_subscription":"e2e-rate-iso-b-b1d8e7","selected_subscription_key":"ai-tenant-e2e-shared-b-683bdc/e2e-rate-iso-b-b1d8e7@ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-683bdc/models/facebook/opt-125m","name":"rate-test-model-683bdc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b1d8e7","namespace":"ai-tenant-e2e-shared-b-683bdc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-683bdc/rate-test-model-683bdc"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:19:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec03fb2-57aa-4ad8-99b8-f85b13d10a31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1081bdbaa031ca1d8527bd5e0c8e8880e7fa5c7fcbdf310fda508a4bad05a168"}
{"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c459b289b0e127bbda76959aa33ca6aa537e19f5c2ddceb49abdf5d52834ffab"}
{"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5453049fdd089fa36dae9417fe2bde66958c01bb57071aa8eeb781a6158c7d6d"}
{"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6e8406936c38c2253fd40f0a31ff711f554f0b223ca1b4f2309f72958329808"}
{"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f71743290ec8bacd298592e72b6ff6dde749fa3ab4ee167d4aecb0d98c56b55a"}
{"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72df99ee5f1f39c6b6b21aedaed83cc4160e78caa8457ebaa8219ee70b5d5fc6"}
{"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be40b4bf042f190a9816ca557cfae7db2e2d26e43bcb3e63f6a13e08f9efb464"}
{"level":"info","ts":"2026-07-28T11:19:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e8e1a475f27bccf113727124ac5306db26c6915942d59e0f617518189c191c9"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e1d40704d0bab10ec4cdcd75600717cbb51295fca76a2396856daf03239cf2c"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d587fef5c318af65b9b662a02acefa24fdedb6d202ad37d1ad38e2997ee871b5"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a0946141c0e325488fe530d74377b98b284da50d8237f90290e89fc994f6f22"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb5735ab3189fda0ecb12733325e9b359b65fee2d855a23ee7c5028dcc0e15ba"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86162ad661f0c29b175a6a5b77d2d9007f5f8659bf159e9643fca74d15eda652"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4a09d8c584b546b3be557cd0d65f9f94b855a807e77d4d0159926a371c27954"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b65fca4b621784b35766a452c3fbb51a7f132f75671b9f02c157c6805ebdb4a5"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/875449f55245a2b6fb635e6b76717dd909b123b13241b58e25f351412f22f186"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/572d7009c5c45cfb65a1817d11e57dc31a156e30a8225b3721afb726c8f10ce5"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9f34ca6fa74dc8b402b2a45c5ee6095599ee7f9b9cdff356d2c63e452aa9166"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6217de1f0f43abcaf0ce61c411f2cebf5e63fafb00b96cf0e3e8335233fe3665"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b8d7318191d7c8ab847859d568df0e91b62a97ca32f3d580d303d8dd5e0bd59"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f308e550bbe76a29feeba97c9f45cb56cc2f3d65f6589d21ea2a49653f2ef0"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c33638ee771b8de68039f0ac9c8e4e7a223d97419310f8fe67c77ffb001e21b5"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/707e0cc233ea49835a9cec6f3413e2be6bfc170c24f4188771f494bab03d46a9"}
{"level":"info","ts":"2026-07-28T11:19:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1d03e6397768fa29f9ca97648dba966ccf5b192c26526db3baa9524bc545664"}
{"level":"info","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b713e47f-873b-4c71-84e9-25865aca3417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b713e47f-873b-4c71-84e9-25865aca3417","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b713e47f-873b-4c71-84e9-25865aca3417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237635,"nanos":132509026},"http":{"id":"b713e47f-873b-4c71-84e9-25865aca3417","method":"POST","headers":{":authority":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b713e47f-873b-4c71-84e9-25865aca3417","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b713e47f-873b-4c71-84e9-25865aca3417","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b713e47f-873b-4c71-84e9-25865aca3417","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b713e47f-873b-4c71-84e9-25865aca3417","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b713e47f-873b-4c71-84e9-25865aca3417","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50558","PortSpecifier":{"PortValue":50558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50558","PortSpecifier":{"PortValue":50558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237635,"nanos":184530013},"http":{"id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","method":"POST","headers":{":authority":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QW5fWico50odiR7Q_eVy9u2Z4PslVhjYd9ZbFyWqcEdLXTV3Mv4XMbc4oAAu"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QW5fWico50odiR7Q_eVy9u2Z4PslVhjYd9ZbFyWqcEdLXTV3Mv4XMbc4oAAu\"}"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7231504-9107-44b8-84dd-d392ee15b1a7","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"f7231504-9107-44b8-84dd-d392ee15b1a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f7231504-9107-44b8-84dd-d392ee15b1a7","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:20:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78dbe3a2-a38b-46c5-acbf-96abc0bad829","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1"}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"}
{"level":"debug","ts":"2026-07-28T11:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"}
{"level":"error","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576"}
{"level":"info","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T11:21:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"}
{"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T11:21:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T11:21:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"}
{"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"}
{"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576"}
{"level":"info","ts":"2026-07-28T11:21:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"}
{"level":"info","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36430","PortSpecifier":{"PortValue":36430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36430","PortSpecifier":{"PortValue":36430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237690,"nanos":662107301},"http":{"id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","method":"POST","headers":{":authority":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f0f1b984-410f-4772-aa21-caff6510da25","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"]}}
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/275c1c0f87b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3ed6a008-c825-4286-a09f-4256f19fb6de"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f0f1b984-410f-4772-aa21-caff6510da25","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-1c9694/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:21:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60ee2943-c91b-44ae-aa79-94498b9b2dbe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47144","PortSpecifier":{"PortValue":47144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","method":"POST","path":"/ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694/v1/chat/completions","host":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47144","PortSpecifier":{"PortValue":47144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785237692,"nanos":733473551},"http":{"id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","method":"POST","headers":{":authority":"e2e-ipp-a-1c9694.apps.61bb32d4-58c6-40b7-b8c4-275c1c0f87b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2jURI1cy1hWW14MF_C3DGJs2h1qUy0sKBLLMh1rykcLTCAb5MAUV3grL3sd5"}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-1c9694.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2jURI1cy1hWW14MF_C3DGJs2h1qUy0sKBLLMh1rykcLTCAb5MAUV3grL3sd5\"}"}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-1c9694.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4fdd3e6f-b7c2-4c21-b173-37330d734ce2","keyName":"e2e-ipp-1c9694","subscription":"ipp-route-1c9694-sub","tenant":"e2e-ipp-a-1c9694","userId":"4fdd3e6f-b7c2-4c21-b173-37330d734ce2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-1c9694.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694\",\"requestedSubscription\":\"ipp-route-1c9694-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-1c9694.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-1c9694/models/facebook/opt-125m","name":"ipp-route-1c9694","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-1c9694-sub","namespace":"ai-tenant-e2e-ipp-a-1c9694","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694"}}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-1c9694/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-1c9694-sub"}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4fdd3e6f-b7c2-4c21-b173-37330d734ce2","keyName":"e2e-ipp-1c9694","selected_subscription":"ipp-route-1c9694-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694-sub@ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-1c9694/models/facebook/opt-125m","name":"ipp-route-1c9694","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-1c9694-sub","namespace":"ai-tenant-e2e-ipp-a-1c9694","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-1c9694/ipp-route-1c9694"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T11:21:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1005668f-c64a-49c2-8ccc-fdf5de364cfa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T11:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/562b488a8f2f39abe54524865767e3454f083e9dcd843af434a86ff298ced8e1"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9943bc4dab335bc192e39e89f308d5eddb1367d38b072236959b9ca30bca51c8"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32ab6ab9afd934118cfc369a081dedc82182d12c688d600c00de23b3bec9e769"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6eed8940e237db6a2cb76dc60bc5bb9b9c673d26808b13251ecabbd2a90863ef"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/632b484debf6f9abb0c6b0d8506d48aec7c24f90c34db87fe7c6256747a08576"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a730a5595879ca7e5c7426831451494017f420990ced7c9697a05adf66004ac1"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c04aafa294ea160d1939fe05910d84d2296af131637c3d5e8b5c260edf2054f6"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca6e76fd1d9af849873780038088a27facdfd4a251155ba81030f23d32fa3133"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5207cfd62ddc347121b82abbbe0278d68f7d11d8be901fad122980dbf1cc3dcd"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39efa7e15ea3f9fe7775925a25a9a8dc0ddecc12a14224fd600a60e4f6547700"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da8fd394e6cecd45d3272382ad9362d698f7e102296c06a67aa6cf5406b713f1"}
{"level":"info","ts":"2026-07-28T11:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/033979cccfe78d3aa0cb015e6e62f5d59791194012ed4c342466e86696d410b1"}